Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DePqhpmRw7dcO1DTewZzPCnUvNU.cer
File: DePqhpmRw7dcO1DTewZzPCnUvNU.cer (raw, json)
Hash identifier: iqDaWhvKhHPYZcZwepgDtPxMjfYWP8tCUcD+01prY6s=
Subject key identifier: 0D:E3:EA:86:99:91:C3:B7:5C:3B:50:D3:7B:06:73:3C:29:D4:BC:D5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 800F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 03:16:14 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.210.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 04:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32783 (0x800f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 3 03:16:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91C3809, serialNumber=0DE3EA869991C3B75C3B50D37B06733C29D4BCD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:6f:59:22:7a:80:a0:cb:09:9c:d0:93:e1:
e1:a4:b7:0c:53:02:db:d5:f2:91:15:40:c2:64:6f:
46:3d:2f:1e:df:29:85:f7:74:87:d0:4c:ba:73:61:
4f:57:c5:8e:83:e8:0f:e1:a4:ce:c5:37:43:fa:bf:
be:ff:38:ba:9c:04:71:2a:96:84:2a:aa:6e:5a:fe:
47:35:10:eb:eb:d8:20:73:5f:86:48:8b:b3:3b:02:
c8:57:5a:39:62:f9:14:a2:4c:cc:aa:f4:a7:fa:a6:
5b:d7:29:b2:c4:56:56:bc:21:da:83:c9:5a:e1:fb:
44:14:32:0d:fe:bf:e1:e8:dc:98:fc:0e:77:8c:ba:
62:ed:ae:b6:29:7a:e0:05:17:f6:24:28:14:9b:3e:
fa:12:53:6f:ec:ea:b3:d9:4c:f0:7d:6f:80:9d:a6:
cb:e7:c0:bb:ae:ce:b7:4b:e8:b6:e6:4a:da:6b:56:
f4:67:89:10:ed:35:2f:99:83:9f:7d:7a:53:6a:f7:
3f:e5:69:8e:8c:b5:e3:bf:48:25:75:de:3e:32:e2:
9f:ab:47:77:56:6e:df:7b:7b:93:00:4b:57:c3:0e:
5b:02:d1:24:0e:83:0c:c0:35:60:41:1e:8d:b8:ed:
65:2e:43:9d:91:b7:a2:39:09:30:23:49:65:03:db:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E3:EA:86:99:91:C3:B7:5C:3B:50:D3:7B:06:73:3C:29:D4:BC:D5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:63:b8:fb:2c:de:6b:b6:d1:44:3f:8e:2f:26:90:75:18:3e:
17:fb:7e:16:cb:5a:98:78:98:b2:c2:40:d2:b8:a0:b8:bb:e6:
d6:d2:e6:ad:72:3d:08:b9:ec:be:2d:c7:ca:dc:1b:ee:df:cb:
a4:81:88:95:20:53:f1:1a:d9:f7:08:57:cb:80:fd:34:c8:ce:
b4:ef:47:e0:03:09:92:0b:bd:26:b9:ca:94:1b:8a:e6:b5:71:
ee:6e:83:f5:14:73:c8:15:1e:b0:fd:6b:a1:73:f3:cb:c6:52:
10:88:3b:bc:be:82:75:84:d5:95:7b:4a:18:4f:c1:66:83:cf:
bb:60:d9:f4:73:01:aa:cf:4e:15:26:96:f0:57:3f:0b:1e:09:
07:24:e6:1b:f1:40:0d:c5:48:42:0b:96:21:43:b3:33:e0:5b:
7b:bc:de:7f:22:50:c7:e6:ad:78:bf:7f:3d:8a:e0:05:ef:b6:
96:ea:41:3a:0a:4c:f3:56:82:d0:04:0d:50:82:52:f6:ac:97:
d9:7d:7b:b9:24:e9:db:77:db:3e:ee:7f:9d:fa:8f:d6:e2:e7:
7f:22:8f:d4:d6:0c:7e:d6:77:3e:54:ad:85:04:b1:5e:12:90:
98:21:44:5d:63:7e:ba:3f:6b:81:80:13:75:5c:1e:89:27:01:
9a:3c:f5:f4
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIAPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgwMzAzMTYxNFoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzM4MDkxMTAvBgNVBAUTKDBERTNFQTg2OTk5MUMzQjc1QzNCNTBE
MzdCMDY3MzNDMjlENEJDRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChdG9ZInqAoMsJnNCT4eGktwxTAtvV8pEVQMJkb0Y9Lx7fKYX3dIfQTLpzYU9X
xY6D6A/hpM7FN0P6v77/OLqcBHEqloQqqm5a/kc1EOvr2CBzX4ZIi7M7AshXWjli
+RSiTMyq9Kf6plvXKbLEVla8IdqDyVrh+0QUMg3+v+Ho3Jj8DneMumLtrrYpeuAF
F/YkKBSbPvoSU2/s6rPZTPB9b4CdpsvnwLuuzrdL6LbmStprVvRniRDtNS+Zg599
elNq9z/laY6MteO/SCV13j4y4p+rR3dWbt97e5MAS1fDDlsC0SQOgwzANWBBHo24
7WUuQ52Rt6I5CTAjSWUD2+TFAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUDePqhpmR
w7dcO1DTewZzPCnUvNUwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMzODA5L0FCNjE2MzZBOEVFOTExRjE4MTEwMzc5NDYzMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDMzgwOS9BQjYxNjM2QThFRTkxMUYxODExMDM3OTQ2MzExRjk3MC9EZVBxaHBt
Unc3ZGNPMURUZXdaelBDblV2TlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGg7NIwDQYJKoZIhvcNAQELBQADggEBADxjuPss3mu20UQ/ji8m
kHUYPhf7fhbLWph4mLLCQNK4oLi75tbS5q1yPQi57L4tx8rcG+7fy6SBiJUgU/Ea
2fcIV8uA/TTIzrTvR+ADCZILvSa5ypQbiua1ce5ug/UUc8gVHrD9a6Fz88vGUhCI
O7y+gnWE1ZV7ShhPwWaDz7tg2fRzAarPThUmlvBXPwseCQck5hvxQA3FSEILliFD
szPgW3u83n8iUMfmrXi/fz2K4AXvtpbqQToKTPNWgtAEDVCCUvasl9l9e7kk6dt3
2z7uf536j9bi538ij9TWDH7Wdz5UrYUEsV4SkJghRF1jfro/a4GAE3VcHoknAZo8
9fQ=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:48 2026 by rpki-client