Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
File: 11KsJgWV3m0QKce5SPSUl-SD6s4.cer (raw, json)
Hash identifier: BWZ2Hqai0Jowuwb9VZ7IJCPPT8VwwQL5pe3FxrAIiXE=
Subject key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 782D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 12:50:52 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 130.102.0.0/16
IP: 192.12.76.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30765 (0x782d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 3 12:50:52 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:c7:14:2c:8b:98:a4:05:5f:56:0b:25:73:
05:ef:cf:44:81:50:d6:d9:34:e6:dc:c7:6a:17:e8:
14:f7:52:f7:58:eb:4e:62:58:6e:0b:a9:62:97:39:
f6:cc:3e:5f:35:f5:45:b9:f5:35:de:22:97:24:98:
dd:9c:8f:cb:e9:0f:67:d3:e2:76:7b:d1:b1:2f:e1:
a7:1e:4f:fa:eb:f2:ef:1f:e7:66:b9:4f:c5:a3:6e:
f7:45:36:37:61:24:97:d9:95:bb:25:d3:79:bd:5a:
47:a2:9d:77:d8:9a:c6:6c:f5:4c:62:60:b8:e0:9c:
46:21:bd:f5:6c:f9:d6:dd:77:5e:8c:ef:5a:b1:bc:
87:09:b3:dc:50:6e:d3:cb:6a:e7:71:53:50:6e:0a:
64:45:7e:5c:ee:09:aa:bf:17:5b:53:26:d6:14:48:
07:43:18:34:af:c4:fd:1a:57:be:55:fe:f7:64:ae:
ce:73:2e:09:d2:9c:02:ff:e2:ef:fe:31:3a:c8:c0:
c9:2a:0b:b5:71:a1:2a:a9:c1:bc:42:e6:49:dc:f5:
14:8b:6d:dc:47:af:fa:af:0a:4f:3b:ff:c5:16:88:
88:55:ae:0d:df:22:35:e3:2d:a2:22:2c:7f:6a:b4:
87:5c:56:c0:c5:0d:96:b8:92:fa:13:d2:3d:7d:ce:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.102.0.0/16
192.12.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5b:dd:7c:da:b7:2a:50:3e:4d:0f:ff:08:6a:86:a0:06:d2:
28:35:d0:7e:7f:43:c4:b0:3d:7e:cd:30:77:4d:63:ac:92:7c:
ac:87:56:d2:7e:05:26:e8:2b:90:63:35:67:54:ee:41:9e:e0:
a2:cc:03:bd:00:ac:3d:5c:4f:3e:b2:10:0f:20:14:85:1f:74:
c6:ba:1d:3b:d7:3a:f9:b5:bb:fb:6c:52:a7:54:ee:17:70:31:
c9:03:04:b2:9e:18:28:8b:9b:97:51:ce:ab:36:b3:87:f6:c8:
43:41:cb:3c:f6:5f:df:fc:ba:1d:d5:7e:af:e5:9f:e9:05:b8:
ce:46:70:87:a8:08:86:50:82:ac:82:a2:40:58:59:a9:42:08:
d2:cf:ac:09:89:9e:47:17:55:05:93:22:ea:cc:6a:bc:55:b4:
89:64:80:aa:53:8b:49:8f:c4:97:bd:ea:59:87:98:b6:f2:74:
6b:52:ce:d9:e6:51:40:59:da:e7:35:bb:5c:a8:ea:d6:b1:17:
45:8d:eb:13:5f:3d:b4:99:c8:30:11:ae:bd:a1:54:5c:02:e5:
a6:2d:5a:27:44:b7:a4:a7:6a:80:ab:9b:96:fd:21:62:a8:ed:
e6:05:be:ae:bd:b5:ee:1b:dc:be:85:a2:8f:b5:3a:ae:1b:b7:
88:bc:68:63
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICeC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMzAzMTI1MDUyWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzODNCMDExMC8GA1UEBRMoRDc1MkFDMjYwNTk1REU2RDEwMjlDN0I5
NDhGNDk0OTdFNDgzRUFDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKFTxxQsi5ikBV9WCyVzBe/PRIFQ1tk05tzHahfoFPdS91jrTmJYbgupYpc59sw+
XzX1Rbn1Nd4ilySY3ZyPy+kPZ9PidnvRsS/hpx5P+uvy7x/nZrlPxaNu90U2N2Ek
l9mVuyXTeb1aR6Kdd9iaxmz1TGJguOCcRiG99Wz51t13XozvWrG8hwmz3FBu08tq
53FTUG4KZEV+XO4Jqr8XW1Mm1hRIB0MYNK/E/RpXvlX+92SuznMuCdKcAv/i7/4x
OsjAySoLtXGhKqnBvELmSdz1FItt3Eev+q8KTzv/xRaIiFWuDd8iNeMtoiIsf2q0
h1xWwMUNlriS+hPSPX3O/EsCAwEAAaOCAvgwggL0MB0GA1UdDgQWBBTXUqwmBZXe
bRApx7lI9JSX5IPqzjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzgzQjAvM0QzRkU5QjZEQkMyMTFFMzhGNTUxNDRGNTkxMUVBMzIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM4M0IwLzNEM0ZFOUI2REJDMjExRTM4RjU1MTQ0RjU5MTFFQTMyLzExS3NKZ1dW
M20wUUtjZTVTUFNVbC1TRDZzNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw
EQQCAAEwCwMDAIJmAwQAwAxMMA0GCSqGSIb3DQEBCwUAA4IBAQAsW9182rcqUD5N
D/8IaoagBtIoNdB+f0PEsD1+zTB3TWOsknysh1bSfgUm6CuQYzVnVO5BnuCizAO9
AKw9XE8+shAPIBSFH3TGuh071zr5tbv7bFKnVO4XcDHJAwSynhgoi5uXUc6rNrOH
9shDQcs89l/f/Lod1X6v5Z/pBbjORnCHqAiGUIKsgqJAWFmpQgjSz6wJiZ5HF1UF
kyLqzGq8VbSJZICqU4tJj8SXvepZh5i28nRrUs7Z5lFAWdrnNbtcqOrWsRdFjesT
Xz20mcgwEa69oVRcAuWmLVonRLekp2qAq5uW/SFiqO3mBb6uvbXuG9y+haKPtTqu
G7eIvGhj
-----END CERTIFICATE-----
Generated at Wed Mar 4 07:03:40 2026 by rpki-client