Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
File: 3XyND0ePm-ar9znAT1tb5NyfYfg.cer (raw, json)
Hash identifier: 0LwqS5tW9RMx3OSX37FScFMjyX3+MyWWRESds81Z9Ww=
Subject key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8330
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 Oct 2026 05:18:40 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.34.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33584 (0x8330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 3 05:18:40 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:9f:b3:26:96:c9:06:5b:b2:72:0e:69:c0:
6e:6c:99:3e:67:f9:4f:8a:2d:71:ba:ae:08:31:9c:
8f:18:d1:cb:9e:69:76:43:0b:9b:3b:2e:d6:11:18:
8d:1d:cd:9f:39:d7:d2:3d:0d:d2:b6:37:55:5e:bf:
e0:a8:08:01:d7:fc:26:87:8c:24:ac:6e:38:d1:1b:
2a:fe:52:c2:55:fb:70:7c:85:da:b4:b5:2e:de:7c:
1c:1c:4e:9d:a3:32:63:84:9e:ac:da:1f:3a:9c:f1:
11:a4:74:86:54:bb:19:87:95:97:22:47:d1:36:17:
81:b6:70:c1:ba:e3:90:0f:5b:c1:b3:84:21:c2:4b:
84:fd:57:16:4f:13:3a:a4:e2:7f:8a:9e:61:81:3e:
de:72:43:c4:24:07:77:51:2f:1f:b5:c1:dd:58:86:
55:7d:48:ee:dd:e4:4d:d4:47:2e:d8:4c:36:2b:ef:
fa:be:4f:51:7e:6b:b4:fc:f1:f4:cc:d1:d5:8b:2a:
c5:42:15:8c:7f:03:47:b0:c6:7d:ce:de:6d:4f:c2:
23:c6:91:4d:6b:97:b0:09:ca:22:b2:64:56:d8:65:
47:dd:3d:30:2e:e8:b8:c2:db:2d:58:24:4f:ce:8a:
ff:9a:34:f6:e7:ee:f0:98:ca:6b:f1:81:92:95:ab:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.34.0/23
Signature Algorithm: sha256WithRSAEncryption
27:46:ed:11:3c:50:66:18:e1:1f:a6:fb:cf:b8:4c:ab:16:6a:
5c:a8:9c:5c:8a:3b:7b:71:00:77:0e:4e:f2:bc:c2:71:89:47:
cd:b8:03:b4:d1:11:4f:1f:ba:46:66:02:76:91:b2:55:ca:bd:
84:af:3d:c3:46:53:50:2a:4e:9c:23:39:32:56:cb:0c:4d:70:
1b:cb:cf:6c:71:77:b2:5e:07:51:38:85:c1:ff:6f:e5:6d:02:
76:c5:c8:54:2e:4f:fc:b6:32:52:75:8e:21:58:07:16:65:14:
4d:05:ea:1f:2f:08:d7:44:15:82:fd:fd:cd:10:2c:25:36:0b:
f6:5b:d0:02:26:cb:a0:f3:97:08:15:4c:87:9f:53:43:0a:65:
39:e0:66:0f:a0:71:b2:09:88:a0:95:29:83:c1:c7:1e:c6:8e:
84:7b:3b:34:a8:0d:b1:cb:df:52:0f:64:2a:22:e2:fa:31:73:
79:06:e1:df:58:32:b5:70:7b:a5:4b:b9:23:88:94:0b:84:16:
78:7d:28:93:b0:16:bc:ac:d3:36:3d:02:5f:92:34:a8:bf:c5:
fd:dd:33:17:4b:b5:08:18:2f:95:f2:a2:a2:73:16:ff:62:3f:
68:26:d9:b2:47:8f:e1:17:1c:6d:7d:02:d5:de:dc:52:18:91:
e3:3d:4e:90
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIMwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAwMzA1MTg0MFoXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlD
MDRGNUI1QkU0REM5RjYxRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYGJ+zJpbJBluycg5pwG5smT5n+U+KLXG6rggxnI8Y0cueaXZDC5s7LtYRGI0d
zZ8519I9DdK2N1Vev+CoCAHX/CaHjCSsbjjRGyr+UsJV+3B8hdq0tS7efBwcTp2j
MmOEnqzaHzqc8RGkdIZUuxmHlZciR9E2F4G2cMG645APW8GzhCHCS4T9VxZPEzqk
4n+KnmGBPt5yQ8QkB3dRLx+1wd1YhlV9SO7d5E3URy7YTDYr7/q+T1F+a7T88fTM
0dWLKsVCFYx/A0ewxn3O3m1PwiPGkU1rl7AJyiKyZFbYZUfdPTAu6LjC2y1YJE/O
iv+aNPbn7vCYymvxgZKVq7N7AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU3XyND0eP
m+ar9znAT1tb5NyfYfgwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIxRTU1LzRDMDk4NjJFNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBl
UG0tYXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGguyIwDQYJKoZIhvcNAQELBQADggEBACdG7RE8UGYY4R+m+8+4
TKsWalyonFyKO3txAHcOTvK8wnGJR824A7TREU8fukZmAnaRslXKvYSvPcNGU1Aq
TpwjOTJWywxNcBvLz2xxd7JeB1E4hcH/b+VtAnbFyFQuT/y2MlJ1jiFYBxZlFE0F
6h8vCNdEFYL9/c0QLCU2C/Zb0AImy6DzlwgVTIefU0MKZTngZg+gcbIJiKCVKYPB
xx7GjoR7OzSoDbHL31IPZCoi4voxc3kG4d9YMrVwe6VLuSOIlAuEFnh9KJOwFrys
0zY9Al+SNKi/xf3dMxdLtQgYL5XyoqJzFv9iP2gm2bJHj+EXHG19AtXe3FIYkeM9
TpA=
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:48:44 2026 by rpki-client