Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer
File: TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer (raw, json)
Hash identifier: l/a07rbHrcE5ls6KNo6Mgafab2xI1nPIepOJqMpK/AQ=
Subject key identifier: 4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D2A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Jun 2026 03:19:24 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.254.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32042 (0x7d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 17 03:19:24 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9129FB7, serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:b7:e6:d8:7b:00:1f:9a:8c:90:bb:09:d0:
ee:e4:7b:cd:a1:7b:d6:3a:ab:fb:82:3a:fd:95:b3:
49:67:92:73:0a:e9:28:36:a8:2a:75:30:84:7c:de:
56:f2:05:e0:13:dc:da:d5:1a:b0:34:6d:b0:a5:86:
12:46:da:78:1b:e1:fa:ea:52:aa:6a:7b:6c:ad:00:
06:15:7a:51:f0:34:64:cc:63:78:7d:da:e9:4a:de:
f3:75:56:b6:9a:ce:30:8b:32:e6:bc:07:40:b0:53:
03:73:30:de:6c:a1:f4:62:b7:4d:f1:2b:9e:6e:52:
11:15:d8:2f:98:6d:69:09:92:20:8a:e4:01:76:a7:
cc:3f:60:3a:50:60:7b:66:3b:07:40:52:f7:c2:a0:
d7:95:11:3d:b1:be:8e:64:96:8c:a1:2d:d6:26:69:
29:b8:81:c7:8e:6e:af:09:a0:51:a6:22:9d:ab:be:
0c:d4:1a:d8:a1:c4:d0:ad:ec:50:f6:62:7b:61:02:
b2:1a:9f:90:6b:52:d3:73:04:cc:b4:d5:cf:6e:fd:
3a:14:ee:dd:dc:18:a1:84:98:af:10:8e:87:c4:ae:
03:ad:60:9b:f8:1c:e4:74:f4:30:de:c4:b1:51:6a:
f0:0a:d5:2e:48:17:f9:18:97:5a:c4:98:81:32:86:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.254.0/23
Signature Algorithm: sha256WithRSAEncryption
58:10:e7:e2:4e:e5:b3:01:88:7c:ee:98:8f:89:f7:6e:18:3c:
d5:06:2c:6e:9f:53:90:56:27:3b:b0:39:e6:f8:ab:c2:13:fe:
61:bf:98:9a:7d:ac:52:7a:6e:a7:dc:37:65:dc:b7:27:f7:50:
fb:c3:cd:3a:b6:3f:e3:1d:2e:a2:f9:f6:36:b4:53:ef:8d:93:
93:50:8d:db:5a:0d:bc:39:b0:4b:5e:04:72:dc:c3:03:3a:f0:
24:e4:22:d4:c7:48:2e:47:c2:a8:da:fb:b4:eb:25:43:7a:d8:
9c:13:e3:d1:df:6c:82:f4:ab:ea:b1:65:3e:fb:6a:ed:45:05:
8e:05:8f:11:37:0a:49:ec:5e:69:4a:87:4c:96:51:03:69:05:
b3:89:3a:34:d5:fc:92:9e:fc:58:f9:af:f1:06:3d:c4:d1:6f:
55:17:db:aa:94:ee:32:b8:da:67:c5:6a:18:83:77:4f:0f:d6:
54:f1:b1:79:36:4d:d8:23:56:b7:fd:62:88:c0:fb:dc:64:72:
59:62:3f:aa:9d:b8:4d:59:d6:bc:69:b9:eb:ce:18:20:4f:d2:
7d:49:5c:b2:8e:ce:e2:2b:79:2b:98:d9:b0:a3:8b:ed:66:21:
27:9d:b5:0f:8b:28:35:f7:ae:bf:f6:6c:2a:57:3b:a7:93:8c:
6d:a8:06:78
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjE3MDMxOTI0WhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyOUZCNzExMC8GA1UEBRMoNEM2MjUzMTBFODNDNDBENzMyRERCMDM4
NDc4NTg3NjNENDhCREREODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AI//t+bYewAfmoyQuwnQ7uR7zaF71jqr+4I6/ZWzSWeScwrpKDaoKnUwhHzeVvIF
4BPc2tUasDRtsKWGEkbaeBvh+upSqmp7bK0ABhV6UfA0ZMxjeH3a6Ure83VWtprO
MIsy5rwHQLBTA3Mw3myh9GK3TfErnm5SERXYL5htaQmSIIrkAXanzD9gOlBge2Y7
B0BS98Kg15URPbG+jmSWjKEt1iZpKbiBx45urwmgUaYinau+DNQa2KHE0K3sUPZi
e2ECshqfkGtS03MEzLTVz279OhTu3dwYoYSYrxCOh8SuA61gm/gc5HT0MN7EsVFq
8ArVLkgX+RiXWsSYgTKGQK0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRMYlMQ6DxA
1zLdsDhHhYdj1Ivd2DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjlGQjcvNTQxMERDNUM2OUZCMTFGMTgxM0YxMkJENjc0N0E4ODgvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI5RkI3LzU0MTBEQzVDNjlGQjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4
UU5jeTNiQTRSNFdIWTlTTDNkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaIE/jANBgkqhkiG9w0BAQsFAAOCAQEAWBDn4k7lswGIfO6Yj4n3
bhg81QYsbp9TkFYnO7A55virwhP+Yb+Ymn2sUnpup9w3Zdy3J/dQ+8PNOrY/4x0u
ovn2NrRT742Tk1CN21oNvDmwS14EctzDAzrwJOQi1MdILkfCqNr7tOslQ3rYnBPj
0d9sgvSr6rFlPvtq7UUFjgWPETcKSexeaUqHTJZRA2kFs4k6NNX8kp78WPmv8QY9
xNFvVRfbqpTuMrjaZ8VqGIN3Tw/WVPGxeTZN2CNWt/1iiMD73GRyWWI/qp24TVnW
vGm5684YIE/SfUlcso7O4it5K5jZsKOL7WYhJ521D4soNfeuv/ZsKlc7p5OMbagG
eA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:35 2026 by rpki-client