Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer
File: 7BWoR694TfECWIIbq5lKyCA1ld8.cer (raw, json)
Hash identifier: bB+rNOpTDVsj1WX4wHNXk2eUrqnZbTJT6091fS/GIuo=
Subject key identifier: EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7829
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 08:50:00 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 192.148.221.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30761 (0x7829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 3 08:50:00 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A917B218, serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:9d:b0:bf:6e:ed:ae:38:dd:8f:3b:20:43:
d8:0d:b8:ee:40:7a:c9:27:46:2b:e9:56:6e:4b:40:
f7:2a:99:3b:fc:2a:b7:a3:69:a0:b4:82:98:66:1b:
dc:f9:25:5b:ea:2c:82:77:b4:3c:f2:1f:e3:dc:ab:
c6:03:f1:86:ec:90:30:52:03:04:b5:89:c2:ce:40:
a6:a8:e5:7c:5a:6c:9c:88:a8:a9:32:b2:76:a6:6d:
7a:75:b2:d3:de:d0:e4:5c:cc:9b:fa:26:12:9c:92:
87:d9:cb:13:a9:f9:05:19:2e:d1:c2:37:1b:d2:5b:
7a:e5:23:4b:39:a5:cc:d0:b0:bb:fc:9d:af:45:c0:
75:b0:d6:33:76:66:22:32:58:c4:4e:ef:9a:6e:9d:
13:10:89:4c:60:71:ff:56:16:57:50:62:86:63:b4:
58:a7:d2:29:44:1d:aa:63:ac:8b:d6:38:6c:21:60:
9a:02:6d:17:3a:f9:e8:06:d4:76:00:dc:38:ee:07:
18:00:f2:cd:f0:40:b6:7b:9a:ce:e3:1b:5e:3a:ea:
09:d2:1e:0b:ec:70:15:50:6f:79:51:4c:0d:dd:d9:
df:00:65:9e:ec:3c:bd:32:68:04:ee:0c:aa:e6:b8:
25:63:22:45:2a:e1:ae:f1:0b:5a:09:28:e9:9a:f2:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.148.221.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d7:cc:45:b8:d6:c3:49:a4:5e:d9:79:e9:d1:81:60:7c:6a:
5e:fa:14:04:15:d2:dd:57:25:b5:1e:2b:44:73:a6:b0:c7:81:
8e:5b:c8:c7:64:45:10:03:43:32:36:65:45:36:5f:76:36:a9:
b5:44:88:1d:d2:bb:6c:19:84:ea:eb:bf:92:61:f1:53:1e:ff:
51:a1:8a:73:31:eb:fc:f0:64:f7:12:88:99:4a:f1:cf:67:8d:
fe:68:1f:fc:70:2b:dc:cf:2a:cf:f0:7a:6f:51:12:65:ac:af:
a4:e1:06:12:87:af:4f:0b:06:26:f4:26:7d:b1:c3:3a:9c:33:
51:fc:38:2b:de:a4:e5:93:92:40:a7:71:19:e4:d7:18:23:15:
67:04:37:8e:33:1e:2f:4f:ad:d9:2d:6a:c3:a8:3b:03:07:cb:
be:2c:e1:ab:89:57:cf:9e:b2:30:01:7f:b1:e6:09:82:34:64:
d9:66:28:c8:bc:b7:a5:73:5e:56:b5:ca:3d:3d:1d:fd:09:11:
d3:9a:59:b8:1e:11:fa:ea:89:a8:4a:e1:da:00:b9:dc:a6:45:
d9:d9:ca:33:0b:9a:86:60:ce:77:ab:37:39:43:9a:33:3b:da:
b6:db:23:b0:40:7d:e9:58:41:e7:8e:df:f6:49:9f:6c:8f:ac:
a0:fb:cb:65
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMzAzMDg1MDAwWhcNMjcwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3QjIxODExMC8GA1UEBRMoRUMxNUE4NDdBRjc4NERGMTAyNTg4MjFC
QUI5OTRBQzgyMDM1OTVERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALnVnbC/bu2uON2POyBD2A247kB6ySdGK+lWbktA9yqZO/wqt6NpoLSCmGYb3Pkl
W+osgne0PPIf49yrxgPxhuyQMFIDBLWJws5ApqjlfFpsnIioqTKydqZtenWy097Q
5FzMm/omEpySh9nLE6n5BRku0cI3G9JbeuUjSzmlzNCwu/ydr0XAdbDWM3ZmIjJY
xE7vmm6dExCJTGBx/1YWV1BihmO0WKfSKUQdqmOsi9Y4bCFgmgJtFzr56AbUdgDc
OO4HGADyzfBAtnuazuMbXjrqCdIeC+xwFVBveVFMDd3Z3wBlnuw8vTJoBO4Mqua4
JWMiRSrhrvELWgko6ZryjKcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTsFahHr3hN
8QJYghurmUrIIDWV3zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0IyMTgvNkJFNkM3MDAwREY0MTFGMUE3NTg0MzAwMDQzRDhDNjcvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdCMjE4LzZCRTZDNzAwMERGNDExRjFBNzU4NDMwMDA0M0Q4QzY3LzdCV29SNjk0
VGZFQ1dJSWJxNWxLeUNBMWxkOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMCU3TANBgkqhkiG9w0BAQsFAAOCAQEAcdfMRbjWw0mkXtl56dGB
YHxqXvoUBBXS3VcltR4rRHOmsMeBjlvIx2RFEANDMjZlRTZfdjaptUSIHdK7bBmE
6uu/kmHxUx7/UaGKczHr/PBk9xKImUrxz2eN/mgf/HAr3M8qz/B6b1ESZayvpOEG
EoevTwsGJvQmfbHDOpwzUfw4K96k5ZOSQKdxGeTXGCMVZwQ3jjMeL0+t2S1qw6g7
AwfLvizhq4lXz56yMAF/seYJgjRk2WYoyLy3pXNeVrXKPT0d/QkR05pZuB4R+uqJ
qErh2gC53KZF2dnKMwuahmDOd6s3OUOaMzvattsjsEB96VhB547f9kmfbI+soPvL
ZQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 07:02:46 2026 by rpki-client