
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
File: RnF4Q-fTSLOez3uSSVUB_jVQujw.cer (raw, json)
Hash identifier: qXUlDeYibe8BDzJfmx0ABAxM6hZyYktnRsr+XlomQO0=
Subject key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 53E1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Jun 2026 22:58:45 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 202348
IP: 91.240.89.0/24
IP: 185.130.49.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 06:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21473 (0x53e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 17 22:58:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:b9:d3:35:f0:db:72:b8:2a:35:51:11:1f:
12:4c:2d:33:64:f1:dd:8d:9a:f8:0e:35:f0:e2:3b:
dd:ae:ff:15:d6:79:be:b8:70:1d:6a:d8:80:1a:6d:
f7:c4:df:e5:ee:8d:5b:8d:3c:69:cd:e8:74:e4:dd:
75:f7:47:c2:dd:f8:89:52:9c:72:e6:13:95:15:fe:
8e:41:e4:92:a0:8c:42:3f:ae:25:18:92:c5:d6:ff:
27:14:8a:80:81:1d:f9:b7:b6:d2:e7:55:75:c1:43:
82:36:3a:77:72:be:db:f9:39:b0:37:dc:b0:c9:3b:
a5:3f:ef:b9:79:f8:54:d2:cd:8f:54:12:b7:6d:cd:
aa:85:05:dc:f2:a1:be:e2:21:d3:35:7d:aa:dc:75:
fa:fa:31:31:0b:54:b6:e1:a2:a0:19:7b:c9:29:73:
df:50:eb:b9:72:40:99:dd:5e:01:b7:a4:4f:3d:49:
f5:3c:9c:ad:f6:b8:83:6b:db:ce:9b:36:6e:8f:ee:
5b:28:5d:35:ce:49:b5:a3:ec:77:a2:7f:3c:8f:48:
d7:39:8b:a4:4c:54:b3:df:24:df:10:09:11:07:ae:
24:78:df:34:6c:e7:b2:d0:df:6f:5e:b3:54:69:5f:
11:31:d5:32:69:9d:3b:2b:45:90:72:7a:54:60:2a:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202348
sbgp-ipAddrBlock: critical
IPv4:
91.240.89.0/24
185.130.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3e:98:72:4b:91:73:11:7d:13:d1:fb:f7:a2:47:56:1e:a7:
63:63:72:30:ef:93:7b:09:8a:f5:98:e2:e1:a1:cb:ec:a3:0d:
38:7b:31:bd:77:38:2e:04:ce:c9:1f:71:68:89:75:fe:e7:0e:
62:e7:7b:26:35:07:4c:f7:67:20:91:dd:9b:6b:e2:4a:00:d7:
7a:88:cc:9a:3b:b4:99:5c:5d:04:af:d3:e1:6d:e5:31:dc:2c:
e4:d4:ba:ff:39:53:53:28:b2:e0:fb:66:31:58:88:e9:8b:60:
f9:e4:67:b1:41:5f:6d:81:63:ad:06:2d:c9:64:32:e9:d6:db:
2a:f1:9b:cf:b4:6e:30:e3:1e:ce:1d:d9:8e:1e:57:82:b3:ef:
f5:17:4a:a1:a5:fc:74:a7:df:08:ca:31:71:16:10:66:77:4d:
d8:f3:f8:af:f4:7d:8c:3a:51:bb:d5:16:93:0e:bc:72:3d:d4:
f9:c1:1a:6b:aa:3d:60:c6:60:c9:49:14:7f:08:35:fb:ae:8d:
98:72:22:36:f4:d1:ec:16:af:eb:b9:e2:22:d3:8a:94:b7:94:
23:39:3d:5f:e5:01:77:97:ed:1b:b4:b1:58:7b:d1:e9:35:57:
c7:43:f3:8e:26:0d:37:74:c3:de:21:c8:03:e0:c4:88:69:44:
ac:62:3b:a4
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgICU+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwNjE3MjI1ODQ1WhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzNEFDRTExMC8GA1UEBRMoNDY3MTc4NDNFN0QzNDhCMzlFQ0Y3Qjky
NDk1NTAxRkUzNTUwQkEzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKDEudM18NtyuCo1UREfEkwtM2Tx3Y2a+A418OI73a7/FdZ5vrhwHWrYgBpt98Tf
5e6NW408ac3odOTddfdHwt34iVKccuYTlRX+jkHkkqCMQj+uJRiSxdb/JxSKgIEd
+be20udVdcFDgjY6d3K+2/k5sDfcsMk7pT/vuXn4VNLNj1QSt23NqoUF3PKhvuIh
0zV9qtx1+voxMQtUtuGioBl7ySlz31DruXJAmd1eAbekTz1J9Tycrfa4g2vbzps2
bo/uWyhdNc5JtaPsd6J/PI9I1zmLpExUs98k3xAJEQeuJHjfNGznstDfb16zVGlf
ETHVMmmdOytFkHJ6VGAqKcECAwEAAaOCAxUwggMRMB0GA1UdDgQWBBRGcXhD59NI
s57Pe5JJVQH+NVC6PDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzRBQ0UvMTVCNDUyNTQ2QUEwMTFGMUE2RDI3QzE5QjFFRTUyOEUvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM0QUNFLzE1QjQ1MjU0NkFBMDExRjFBNkQyN0MxOUIxRUU1MjhFL1JuRjRRLWZU
U0xPZXozdVNTVlVCX2pWUXVqdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMDFmwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABb8FkDBAC5gjEw
DQYJKoZIhvcNAQELBQADggEBAHw+mHJLkXMRfRPR+/eiR1Yep2NjcjDvk3sJivWY
4uGhy+yjDTh7Mb13OC4EzskfcWiJdf7nDmLneyY1B0z3ZyCR3Ztr4koA13qIzJo7
tJlcXQSv0+Ft5THcLOTUuv85U1MosuD7ZjFYiOmLYPnkZ7FBX22BY60GLclkMunW
2yrxm8+0bjDjHs4d2Y4eV4Kz7/UXSqGl/HSn3wjKMXEWEGZ3Tdjz+K/0fYw6UbvV
FpMOvHI91PnBGmuqPWDGYMlJFH8INfuujZhyIjb00ewWr+u54iLTipS3lCM5PV/l
AXeX7Ru0sVh70ek1V8dD844mDTd0w94hyAPgxIhpRKxiO6Q=
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:39 2026 by rpki-client