Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
File: PDiOKfqhof7qOJefIG9GaK2oyJ4.cer (raw, json)
Hash identifier: SYS4NZWjvXCrSLeaTKHp2w16tO7oj2SsbgCGJ7d18tw=
Subject key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D1E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Jun 2026 14:00:15 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 66.226.144.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32030 (0x7d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 16 14:00:15 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:d8:37:48:4e:e9:7f:a3:f8:d3:ca:80:73:
56:3d:bf:bb:99:58:e0:d3:5b:8c:7b:76:71:49:22:
f8:61:be:1e:f1:2e:c2:69:aa:7d:4e:59:57:ee:2c:
54:b4:6f:3b:39:5b:17:21:d8:c2:53:9f:0e:0d:4b:
e7:e2:d5:93:fb:aa:90:b3:3f:ae:c8:36:82:c0:1d:
c7:a5:3b:b7:2a:bf:aa:7f:31:9d:3c:6e:f4:f7:ae:
17:8b:0f:ab:e7:91:cb:22:1c:22:a2:88:0c:5d:32:
1f:30:7f:95:1c:5e:f2:57:0c:66:eb:67:91:28:75:
77:8c:e0:39:22:42:54:8a:52:ed:f7:2c:14:33:c0:
bf:74:f1:65:b8:be:e7:cd:7e:d6:34:42:eb:6e:e1:
5d:34:0c:ef:63:8d:37:6d:21:f4:e8:10:c8:ef:f3:
9e:3a:65:4a:dd:8a:e4:3b:46:3c:3b:e6:de:44:6b:
e8:3f:f5:00:46:30:12:22:19:a3:8c:58:36:f8:3f:
4d:e1:22:45:73:b3:ae:9a:e6:16:6c:7a:05:84:c8:
5e:30:df:54:44:1a:8a:d5:27:bb:d5:50:13:2d:f2:
47:96:bd:5b:e3:7a:27:f5:9a:64:f3:e4:15:e0:26:
04:fa:5f:99:b1:59:0f:aa:e7:f8:78:fe:b1:3e:7e:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
98:93:6f:ee:8e:32:78:f6:12:16:21:3e:0d:b3:67:ee:b6:84:
3b:80:a6:a9:9c:c1:51:fd:d2:ca:e6:44:6a:bc:bc:30:37:f5:
60:50:a8:1f:34:ad:c9:a8:6f:e2:39:9b:e0:e8:8a:ca:87:16:
83:d0:fb:37:12:d3:b5:72:49:d6:17:80:c1:01:f1:d0:da:f1:
54:aa:82:37:dd:61:77:b7:f7:bf:1e:68:c8:cd:91:a2:8e:b9:
0a:55:38:f5:24:8a:45:94:93:99:5d:ad:1e:5b:53:63:4c:f0:
34:af:b8:b5:f2:db:df:51:8c:74:b0:45:5e:be:7b:77:08:99:
ff:7c:35:41:95:d7:fd:b5:9d:3e:2d:fe:98:b7:1d:f9:05:8f:
2b:f5:6e:00:b5:23:fe:84:8f:a8:b0:8b:06:85:ed:a5:e8:71:
da:57:2c:46:2c:e3:c0:15:e8:0c:dd:e3:f4:c7:8a:ad:10:e8:
9a:26:b9:79:15:f8:e6:a3:18:0f:23:ca:c0:41:b4:9c:8d:bf:
f9:18:bc:e2:64:d4:6d:77:30:3b:dd:39:d6:36:65:8e:9f:26:
c3:4a:59:e8:f6:7f:9a:3f:50:31:64:03:70:fa:a8:eb:60:4f:
d5:37:4d:2d:92:b0:7b:d9:0b:05:55:a5:6b:76:93:32:d4:a8:
c2:d1:5d:78
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjE2MTQwMDE1WhcNMjcwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBNEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlG
MjA2RjQ2NjhBREE4Qzg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALf72DdITul/o/jTyoBzVj2/u5lY4NNbjHt2cUki+GG+HvEuwmmqfU5ZV+4sVLRv
OzlbFyHYwlOfDg1L5+LVk/uqkLM/rsg2gsAdx6U7tyq/qn8xnTxu9PeuF4sPq+eR
yyIcIqKIDF0yHzB/lRxe8lcMZutnkSh1d4zgOSJCVIpS7fcsFDPAv3TxZbi+581+
1jRC627hXTQM72ONN20h9OgQyO/znjplSt2K5DtGPDvm3kRr6D/1AEYwEiIZo4xY
Nvg/TeEiRXOzrprmFmx6BYTIXjDfVEQaitUnu9VQEy3yR5a9W+N6J/WaZPPkFeAm
BPpfmbFZD6rn+Hj+sT5+e+kCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ8OI4p+qGh
/uo4l58gb0ZorajInjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCOUQvNENGM0IzNzAyRDEyMTFGMUJGQzQ3OEY1OThFRTUyOEUvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE0QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFo
b2Y3cU9KZWZJRzlHYUsyb3lKNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBELikDANBgkqhkiG9w0BAQsFAAOCAQEAmJNv7o4yePYSFiE+DbNn
7raEO4CmqZzBUf3SyuZEary8MDf1YFCoHzStyahv4jmb4OiKyocWg9D7NxLTtXJJ
1heAwQHx0NrxVKqCN91hd7f3vx5oyM2Roo65ClU49SSKRZSTmV2tHltTY0zwNK+4
tfLb31GMdLBFXr57dwiZ/3w1QZXX/bWdPi3+mLcd+QWPK/VuALUj/oSPqLCLBoXt
pehx2lcsRizjwBXoDN3j9MeKrRDomia5eRX45qMYDyPKwEG0nI2/+Ri84mTUbXcw
O9051jZljp8mw0pZ6PZ/mj9QMWQDcPqo62BP1TdNLZKwe9kLBVWla3aTMtSowtFd
eA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:18:05 2026 by rpki-client