Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
File: P7ClbiDxlMd0mHnU0iWz-X6evs8.cer (raw, json)
Hash identifier: IxKFL4OExNTEJXm2AIuQL13XcrT/orqMidd7HxKI6Uo=
Subject key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8423
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Oct 2026 12:49:49 +0000
Certificate not after: Wed 01 Mar 2028 00:00:00 +0000
Subordinate resources: IP: 131.226.64.0/18
IP: 139.135.64.0/18
IP: 160.84.128.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 23:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33827 (0x8423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 29 12:49:49 2026 GMT
Not After : Mar 1 00:00:00 2028 GMT
Subject: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:e5:e4:f4:8f:af:8c:1d:2e:d5:f2:68:db:
31:4f:e4:a9:26:65:b4:f1:b9:33:4c:ff:3e:e3:2f:
88:b0:4a:79:0f:83:da:9e:a8:51:e3:d5:28:79:94:
53:45:bf:b3:d8:68:e7:ce:15:71:6b:42:ef:b1:9e:
3f:a1:01:f9:52:f0:9d:a1:bb:37:6a:16:bc:4b:f0:
09:25:59:a8:f8:73:7d:7e:ff:e8:df:dd:36:f9:03:
22:25:82:14:5b:11:80:d2:78:58:ee:2c:16:c2:a5:
c1:de:ed:e0:35:d9:75:15:05:51:44:7f:6d:cc:3c:
6c:de:46:0a:56:02:ca:f5:eb:39:a3:f8:57:92:1c:
89:69:34:93:d0:55:65:b5:c3:fb:03:50:8e:9d:a7:
df:0d:33:9e:13:da:58:e8:c1:11:6c:31:44:68:af:
ec:ea:d6:79:ab:69:8e:f9:fd:67:a6:19:c7:74:23:
25:82:f3:36:13:a5:83:70:04:49:72:36:1f:e5:05:
22:28:03:50:37:7e:5f:33:54:e6:a6:1f:9a:3f:a8:
bc:8b:c3:4c:7d:c8:97:76:fd:55:cb:3d:ae:05:43:
9c:db:83:4e:bd:96:dd:de:cc:e8:55:bb:b5:15:15:
52:ce:eb:e9:b7:81:9f:4d:95:82:9a:1b:62:5d:ce:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.226.64.0/18
139.135.64.0/18
160.84.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8d:51:2a:b9:2c:bb:d8:48:10:84:7b:bf:23:4e:0f:1b:a8:d3:
87:a7:8c:a9:5a:c2:ae:9b:31:8f:94:c5:d5:5c:f3:23:9c:8b:
11:25:ee:e7:3a:5e:6a:77:ed:7f:69:5e:4e:61:d4:68:f5:ad:
9d:f5:97:c7:c9:a0:87:5c:21:b1:87:0f:44:12:25:c8:8b:13:
c1:6d:fc:af:5f:de:c9:9c:e7:e4:f4:a0:61:44:8f:db:6a:15:
45:57:1b:32:e5:b4:8b:df:a0:fd:6f:e4:5f:96:de:32:f2:da:
94:74:9c:5c:b6:de:9e:b4:dd:59:b7:ad:d7:ac:ac:ef:fb:f3:
30:68:de:4d:f2:43:fc:2a:2b:b0:8b:1a:f9:25:15:6f:7f:da:
f6:9f:9b:5c:1d:95:06:bd:b6:5e:14:e4:fc:6c:5c:b9:fa:5d:
fc:d7:a1:03:6d:7f:78:24:08:3e:7c:a6:8b:9b:b7:c9:a6:a8:
4b:79:43:70:47:8b:c2:b4:5a:3c:53:a3:6f:8e:36:b7:ab:e0:
4d:e6:00:7e:85:f7:c7:11:4b:71:3c:ad:0e:b2:a1:11:76:1e:
64:5c:9b:08:bf:26:a0:94:f1:f9:c3:c8:8b:2e:1a:10:35:00:
26:c5:95:b9:c9:4a:35:f0:10:26:4a:9b:aa:7a:30:8c:21:00:
85:37:fc:f6
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgIDAIQjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAyOTEyNDk0OVoXDTI4MDMwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDU0NTYxMTAvBgNVBAUTKDNGQjBBNTZFMjBGMTk0Qzc3NDk4NzlE
NEQyMjVCM0Y5N0U5RUJFQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5GuXk9I+vjB0u1fJo2zFP5KkmZbTxuTNM/z7jL4iwSnkPg9qeqFHj1Sh5lFNF
v7PYaOfOFXFrQu+xnj+hAflS8J2huzdqFrxL8AklWaj4c31+/+jf3Tb5AyIlghRb
EYDSeFjuLBbCpcHe7eA12XUVBVFEf23MPGzeRgpWAsr16zmj+FeSHIlpNJPQVWW1
w/sDUI6dp98NM54T2ljowRFsMURor+zq1nmraY75/WemGcd0IyWC8zYTpYNwBEly
Nh/lBSIoA1A3fl8zVOamH5o/qLyLw0x9yJd2/VXLPa4FQ5zbg069lt3ezOhVu7UV
FVLO6+m3gZ9NlYKaG2JdzhjLAgMBAAGjggL/MIIC+zAdBgNVHQ4EFgQUP7ClbiDx
lMd0mHnU0iWz+X6evs8wHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ1NDU2Lzc3MTlDNzEwMzA2NjExRUI4NTI1MTM1NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NTQ1Ni83NzE5QzcxMDMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9QN0NsYmlE
eGxNZDBtSG5VMGlXei1YNmV2czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8EHDAa
MBgEAgABMBIDBAaD4kADBAaLh0ADBAagVIAwDQYJKoZIhvcNAQELBQADggEBAI1R
Krksu9hIEIR7vyNODxuo04enjKlawq6bMY+UxdVc8yOcixEl7uc6Xmp37X9pXk5h
1Gj1rZ31l8fJoIdcIbGHD0QSJciLE8Ft/K9f3smc5+T0oGFEj9tqFUVXGzLltIvf
oP1v5F+W3jLy2pR0nFy23p603Vm3rdesrO/78zBo3k3yQ/wqK7CLGvklFW9/2vaf
m1wdlQa9tl4U5PxsXLn6XfzXoQNtf3gkCD58poubt8mmqEt5Q3BHi8K0WjxTo2+O
Nrer4E3mAH6F98cRS3E8rQ6yoRF2HmRcmwi/JqCU8fnDyIsuGhA1ACbFlbnJSjXw
ECZKm6p6MIwhAIU3/PY=
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:21:51 2026 by rpki-client