Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1iASfm_6fYHe3U-W-C-tlcxS0Cw.cer
File: 1iASfm_6fYHe3U-W-C-tlcxS0Cw.cer (raw, json)
Hash identifier: SinCHJdJ/nnZ32GaxOHWrjN1Ta5Ttwa7fTHPegTOkOs=
Subject key identifier: D6:20:12:7E:6F:FA:7D:81:DE:DD:4F:96:F8:2F:AD:95:CC:52:D0:2C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Aug 2026 05:41:42 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 14:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32981 (0x80d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 17 05:41:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91AC757, serialNumber=D620127E6FFA7D81DEDD4F96F82FAD95CC52D02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:b0:d2:03:88:ee:f4:57:68:7a:a8:3f:63:
b5:60:9a:6f:f7:b8:1a:84:2e:d8:d4:48:6a:9c:72:
15:99:62:80:e1:c8:68:b3:36:ec:94:36:d4:be:3d:
64:80:f8:92:71:f1:b9:a1:ca:14:41:d2:13:ef:e7:
5d:43:18:67:bc:7e:5f:15:92:69:c1:c5:8a:b7:c6:
9e:94:a7:10:a0:6a:c0:cd:2f:09:09:d8:53:57:a6:
fc:7a:07:5b:20:d5:de:79:ec:53:2e:38:b6:1b:77:
91:d6:21:ff:62:0a:28:d7:b7:ff:62:c4:cd:55:cd:
8f:68:19:10:4d:89:eb:41:e5:1a:cd:c7:a4:4c:a6:
82:4e:1c:6d:af:23:5c:f8:42:0e:1c:1a:71:38:f7:
ff:45:82:02:9c:da:b7:34:f5:b9:db:8e:0d:08:18:
9a:d3:74:ab:5e:0d:fe:aa:21:97:45:c1:ab:54:a5:
d3:2f:54:8f:94:8a:4f:38:5c:39:c1:5b:88:6c:4e:
6e:c2:a4:16:d3:6d:de:a4:99:b3:d8:74:9e:e7:ec:
18:12:bf:8d:bb:4c:b5:00:a1:8a:ab:b5:2d:75:fe:
08:ac:57:da:7d:f7:4f:c0:10:1f:1e:64:07:bd:b5:
4a:b5:0b:55:6a:d8:6f:75:9d:3b:f2:f0:67:af:e8:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:20:12:7E:6F:FA:7D:81:DE:DD:4F:96:F8:2F:AD:95:CC:52:D0:2C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:5b:78:b8:b4:a6:73:d5:ae:ed:83:c1:5c:8d:bf:ad:0a:94:
37:2f:41:17:80:64:12:1e:52:66:26:ce:f9:84:66:31:24:19:
35:a3:00:d1:97:91:4b:bc:4c:44:82:0d:ff:73:ad:ec:04:40:
b5:ed:c8:0a:9d:4d:25:e9:bc:07:38:82:73:95:c9:78:9b:e3:
85:70:af:e8:89:e7:38:bd:74:c2:d7:2f:9f:28:35:f8:c0:c0:
67:1e:06:2f:04:9f:11:7a:e7:06:19:7f:8e:35:19:ce:39:49:
54:b2:e6:54:f2:bf:4f:61:20:71:b3:af:89:8b:7a:59:75:2d:
3e:44:a6:54:d7:5e:3f:ce:2c:0e:cf:a1:aa:5b:ba:d1:0f:c2:
d7:1e:56:e6:3e:6f:c8:d1:cf:24:7d:a9:cf:c2:41:d8:98:2a:
bc:4a:76:d8:10:43:b5:ac:fb:52:a9:fb:cd:98:fb:77:a3:e0:
f3:7c:cc:de:46:c3:ad:7a:aa:f0:2b:dc:7c:fd:07:df:5f:43:
3c:49:f1:e7:fa:99:30:88:56:08:b3:0c:3d:50:94:5d:31:ef:
24:e5:66:c0:df:81:5b:d4:56:4f:b0:ed:64:06:38:47:a9:80:
0e:bb:71:a7:60:8e:39:46:d0:e0:76:15:40:ab:8e:af:5b:56:
3f:27:6f:a3
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIDVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgxNzA1NDE0MloXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUM3NTcxMTAvBgNVBAUTKEQ2MjAxMjdFNkZGQTdEODFERURENEY5
NkY4MkZBRDk1Q0M1MkQwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMs7DSA4ju9Fdoeqg/Y7Vgmm/3uBqELtjUSGqcchWZYoDhyGizNuyUNtS+PWSA
+JJx8bmhyhRB0hPv511DGGe8fl8VkmnBxYq3xp6UpxCgasDNLwkJ2FNXpvx6B1sg
1d557FMuOLYbd5HWIf9iCijXt/9ixM1VzY9oGRBNietB5RrNx6RMpoJOHG2vI1z4
Qg4cGnE49/9FggKc2rc09bnbjg0IGJrTdKteDf6qIZdFwatUpdMvVI+Uik84XDnB
W4hsTm7CpBbTbd6kmbPYdJ7n7BgSv427TLUAoYqrtS11/gisV9p990/AEB8eZAe9
tUq1C1Vq2G91nTvy8Gev6M8nAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU1iASfm/6
fYHe3U+W+C+tlcxS0CwwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFDNzU3LzUwNzJCRUEyOTlGRTExRjFBOURFOTk4MzRCMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBQzc1Ny81MDcyQkVBMjk5RkUxMUYxQTlERTk5ODM0QjExRjk3MC8xaUFTZm1f
NmZZSGUzVS1XLUMtdGxjeFMwQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGg7H4wDQYJKoZIhvcNAQELBQADggEBAE5beLi0pnPVru2DwVyN
v60KlDcvQReAZBIeUmYmzvmEZjEkGTWjANGXkUu8TESCDf9zrewEQLXtyAqdTSXp
vAc4gnOVyXib44Vwr+iJ5zi9dMLXL58oNfjAwGceBi8EnxF65wYZf441Gc45SVSy
5lTyv09hIHGzr4mLell1LT5EplTXXj/OLA7PoapbutEPwtceVuY+b8jRzyR9qc/C
QdiYKrxKdtgQQ7Ws+1Kp+82Y+3ej4PN8zN5Gw616qvAr3Hz9B99fQzxJ8ef6mTCI
VgizDD1QlF0x7yTlZsDfgVvUVk+w7WQGOEepgA67cadgjjlG0OB2FUCrjq9bVj8n
b6M=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:46 2026 by rpki-client