Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6iR100bqLYkBRNhvdfF6f7MnMaU.cer
File: 6iR100bqLYkBRNhvdfF6f7MnMaU.cer (raw, json)
Hash identifier: bUZqlilxmy9rywhqlxAFDvJzrLFZKNiyr0URRHUhc6Y=
Subject key identifier: EA:24:75:D3:46:EA:2D:89:01:44:D8:6F:75:F1:7A:7F:B3:27:31:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7EA8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Jul 2026 00:41:30 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 198.15.17.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32424 (0x7ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 13 00:41:30 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91B18B5, serialNumber=EA2475D346EA2D890144D86F75F17A7FB32731A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:33:41:b8:1c:1a:8d:49:3e:a2:80:ec:02:
24:d3:a5:82:62:53:4b:7e:30:1d:be:da:a3:05:b6:
68:2b:d5:73:d3:f4:f9:7f:f0:90:23:3e:2a:6d:08:
d2:0f:7c:c1:ef:a8:17:59:43:b6:9f:82:b1:cc:d4:
78:15:cb:08:e2:2e:f3:47:a6:99:94:2f:08:c8:d6:
cb:7f:4d:4e:45:74:e3:bf:16:91:5c:f1:a9:38:5d:
01:fc:9a:67:cb:a4:a9:56:68:08:5a:4f:10:4b:e4:
cb:b7:3b:48:74:9d:66:87:49:14:c0:66:3f:10:78:
1f:57:5c:eb:3c:8a:9c:32:80:2a:4d:9b:40:9c:96:
44:5d:bf:b4:81:fe:07:39:0f:e5:64:8f:eb:51:c8:
7a:36:5f:dc:c7:c5:6f:ba:53:8c:59:b8:05:6e:4a:
00:c5:90:75:00:5f:73:2f:af:26:00:e2:16:24:30:
39:4b:41:42:5d:fb:fa:0f:09:30:b4:35:18:f7:00:
ef:11:31:6d:b2:c7:b8:06:d1:b7:2c:aa:dd:2b:f5:
db:48:12:90:3b:26:cc:91:f4:99:40:70:28:70:80:
90:27:1e:f0:b6:39:69:64:d3:e0:b7:a8:81:14:87:
49:56:38:9e:33:a7:f8:1b:65:86:aa:b1:1c:15:1e:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:24:75:D3:46:EA:2D:89:01:44:D8:6F:75:F1:7A:7F:B3:27:31:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.15.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f5:84:de:44:52:18:71:21:e9:7c:b2:f2:a5:d1:24:5a:2f:
76:ff:8d:31:39:df:b2:20:86:ad:00:49:36:d2:ca:9e:69:d8:
49:22:0d:3f:d9:63:a6:d4:da:c4:88:5f:65:32:09:cb:d2:69:
e5:4b:20:eb:aa:c0:b9:cc:e0:d4:e7:bf:db:4d:56:03:6c:fd:
9e:05:cb:95:29:35:79:58:b6:fe:1f:75:bd:c1:52:03:7d:ef:
ac:11:65:9d:0c:2a:d9:da:e2:b0:5a:7a:f8:bd:cf:c4:fb:51:
33:e9:22:94:b1:4d:fa:87:a3:9e:9b:df:34:45:c4:f9:bf:28:
ee:c5:f2:30:d1:35:b6:5d:bc:61:aa:70:9b:f8:0a:55:2a:84:
a6:ef:b9:8b:a2:07:d7:a2:12:96:a5:87:84:9b:ea:f5:a1:67:
67:66:b8:f8:6a:12:78:75:6e:b7:88:5e:0f:4a:fc:72:ad:5b:
23:f2:a8:13:c5:88:1b:87:5d:c8:46:46:0a:1b:a5:65:6d:3d:
ae:87:b1:51:fe:ef:0b:b5:d7:1c:35:70:8e:9b:0c:ec:5d:07:
2f:97:58:cc:09:73:01:25:b7:5d:49:a5:2a:42:c5:83:25:c3:
a5:8e:26:72:f2:59:62:fe:05:fa:99:a9:a0:7a:af:06:44:70:
9b:b2:9a:a9
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzEzMDA0MTMwWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCMThCNTExMC8GA1UEBRMoRUEyNDc1RDM0NkVBMkQ4OTAxNDREODZG
NzVGMTdBN0ZCMzI3MzFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKQAM0G4HBqNST6igOwCJNOlgmJTS34wHb7aowW2aCvVc9P0+X/wkCM+Km0I0g98
we+oF1lDtp+CsczUeBXLCOIu80emmZQvCMjWy39NTkV0478WkVzxqThdAfyaZ8uk
qVZoCFpPEEvky7c7SHSdZodJFMBmPxB4H1dc6zyKnDKAKk2bQJyWRF2/tIH+BzkP
5WSP61HIejZf3MfFb7pTjFm4BW5KAMWQdQBfcy+vJgDiFiQwOUtBQl37+g8JMLQ1
GPcA7xExbbLHuAbRtyyq3Sv120gSkDsmzJH0mUBwKHCAkCce8LY5aWTT4LeogRSH
SVY4njOn+BtlhqqxHBUe9csCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTqJHXTRuot
iQFE2G918Xp/sycxpTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjE4QjUvOTQwMjZGNDQ3RTUzMTFGMThDNUJEQzJGODVBMzBGQkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIxOEI1Lzk0MDI2RjQ0N0U1MzExRjE4QzVCREMyRjg1QTMwRkJDLzZpUjEwMGJx
TFlrQlJOaHZkZkY2ZjdNbk1hVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMYPETANBgkqhkiG9w0BAQsFAAOCAQEATfWE3kRSGHEh6Xyy8qXR
JFovdv+NMTnfsiCGrQBJNtLKnmnYSSINP9ljptTaxIhfZTIJy9Jp5Usg66rAuczg
1Oe/201WA2z9ngXLlSk1eVi2/h91vcFSA33vrBFlnQwq2drisFp6+L3PxPtRM+ki
lLFN+oejnpvfNEXE+b8o7sXyMNE1tl28Yapwm/gKVSqEpu+5i6IH16ISlqWHhJvq
9aFnZ2a4+GoSeHVut4heD0r8cq1bI/KoE8WIG4ddyEZGChulZW09roexUf7vC7XX
HDVwjpsM7F0HL5dYzAlzASW3XUmlKkLFgyXDpY4mcvJZYv4F+pmpoHqvBkRwm7Ka
qQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:35 2026 by rpki-client