Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P352KHem7vVf7hmyuvchynA55k4.cer
File: P352KHem7vVf7hmyuvchynA55k4.cer (raw, json)
Hash identifier: hJ7/v7P36zIB3M0n5ElEVcUipiFMokwxFdAcUPMAGmc=
Subject key identifier: 3F:7E:76:28:77:A6:EE:F5:5F:EE:19:B2:BA:F7:21:CA:70:39:E6:4E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8051
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 23:43:27 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.236.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 04:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32849 (0x8051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 23:43:27 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A911049F, serialNumber=3F7E762877A6EEF55FEE19B2BAF721CA7039E64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:1e:99:2a:41:ba:ab:b0:bf:ae:69:de:18:
16:81:e3:1c:2d:29:70:fc:24:67:f2:fb:f0:0c:cd:
0a:af:fb:44:8f:56:03:fe:0a:b5:dc:69:d4:f7:a2:
6a:d0:44:d1:8f:62:59:bc:d2:d2:b9:02:66:97:d6:
f2:af:c1:8f:34:d8:fa:2d:1e:76:15:6d:17:a4:bc:
d9:ef:22:6b:ee:06:2b:ba:e2:02:87:1c:2b:d6:36:
df:77:de:05:34:ba:0d:f4:ed:1d:55:2a:c5:03:5b:
ba:56:9a:d4:5e:08:99:e7:90:e7:19:0d:4a:a8:78:
49:32:68:6e:0f:75:b3:16:d2:20:ee:13:d8:12:b0:
6b:30:bd:b0:bb:e2:a0:ea:d1:ea:81:6e:e3:fc:60:
7f:ea:37:a0:2e:5d:de:88:d2:9f:21:4d:5d:3c:ef:
4f:4e:20:77:23:63:12:f3:50:0e:88:96:5c:4a:58:
da:43:5f:6a:09:86:9f:af:37:30:4b:e8:53:77:a6:
e7:5c:40:de:37:60:e0:54:64:9d:5a:f2:2d:c8:3a:
2d:2a:23:b9:84:ed:61:ea:b3:2a:bf:38:42:2d:a9:
6f:65:0c:e8:8e:17:c2:05:58:8f:c6:50:04:b6:ac:
18:f1:f7:3b:7c:9e:c8:fc:72:d8:16:da:35:89:38:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7E:76:28:77:A6:EE:F5:5F:EE:19:B2:BA:F7:21:CA:70:39:E6:4E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:55:a3:7d:d7:17:79:e5:5e:a0:77:ee:de:05:5f:9c:c3:97:
8b:d4:e1:d5:b9:a7:55:7e:37:da:27:09:37:86:5f:a0:88:22:
a9:96:8a:0d:df:03:eb:44:d7:a3:86:98:83:2c:d6:b7:5c:3c:
ce:52:b0:d3:37:50:50:e5:ce:fa:c2:c4:63:25:65:ff:0f:c7:
6e:33:ab:e9:6e:2e:bf:3d:02:2c:45:bb:3a:ed:ba:13:b3:c5:
67:55:39:b0:be:6b:0e:09:a4:f5:ba:8b:a6:52:ca:b4:fe:3f:
3c:4f:a3:4b:1d:f1:67:93:b7:9b:b3:fc:a3:07:9a:5f:f6:1d:
80:81:49:91:38:b4:e5:99:02:48:9b:e3:f4:4d:b8:ce:1c:73:
e1:93:8e:9d:9b:bd:3f:04:20:5b:6d:c8:75:b9:b0:03:d4:a8:
63:14:64:92:7c:2e:a0:ac:0a:6d:ce:f0:6b:01:fb:ab:2c:a7:
7e:e1:fe:d6:ce:62:8b:e1:13:d3:4a:f4:a1:93:62:c4:c3:60:
35:6b:26:11:bf:d5:8f:82:c5:3c:a3:37:06:8e:9e:69:e2:75:
1d:99:33:a7:80:d5:58:86:4f:8c:a2:72:0e:b1:aa:39:02:d1:
64:dd:a9:97:59:20:2c:86:14:ac:bb:af:63:17:94:1d:f9:dd:
da:4f:7d:01
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIBRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgwNTIzNDMyN1oXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTA0OUYxMTAvBgNVBAUTKDNGN0U3NjI4NzdBNkVFRjU1RkVFMTlC
MkJBRjcyMUNBNzAzOUU2NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOIB6ZKkG6q7C/rmneGBaB4xwtKXD8JGfy+/AMzQqv+0SPVgP+CrXcadT3omrQ
RNGPYlm80tK5AmaX1vKvwY802PotHnYVbRekvNnvImvuBiu64gKHHCvWNt933gU0
ug307R1VKsUDW7pWmtReCJnnkOcZDUqoeEkyaG4PdbMW0iDuE9gSsGswvbC74qDq
0eqBbuP8YH/qN6AuXd6I0p8hTV08709OIHcjYxLzUA6IllxKWNpDX2oJhp+vNzBL
6FN3pudcQN43YOBUZJ1a8i3IOi0qI7mE7WHqsyq/OEItqW9lDOiOF8IFWI/GUAS2
rBjx9zt8nsj8ctgW2jWJOAJtAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUP352KHem
7vVf7hmyuvchynA55k4wHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTEwNDlGLzcyRTQ4MjY2OTEyNzExRjE5RkIyRjRGRTVBMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExMDQ5Ri83MkU0ODI2NjkxMjcxMUYxOUZCMkY0RkU1QTExRjk3MC9QMzUyS0hl
bTd2VmY3aG15dXZjaHluQTU1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACg7OwwDQYJKoZIhvcNAQELBQADggEBAEtVo33XF3nlXqB37t4F
X5zDl4vU4dW5p1V+N9onCTeGX6CIIqmWig3fA+tE16OGmIMs1rdcPM5SsNM3UFDl
zvrCxGMlZf8Px24zq+luLr89AixFuzrtuhOzxWdVObC+aw4JpPW6i6ZSyrT+PzxP
o0sd8WeTt5uz/KMHml/2HYCBSZE4tOWZAkib4/RNuM4cc+GTjp2bvT8EIFttyHW5
sAPUqGMUZJJ8LqCsCm3O8GsB+6ssp37h/tbOYovhE9NK9KGTYsTDYDVrJhG/1Y+C
xTyjNwaOnmnidR2ZM6eA1ViGT4yicg6xqjkC0WTdqZdZICyGFKy7r2MXlB353dpP
fQE=
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:21:59 2026 by rpki-client