
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
File: WKIeeyP68huJ00Jw61b3RJwjmYY.cer (raw, json)
Hash identifier: ZfMjaqkQ0HSjVmKHq3OAOInpoTXH6mT730CHmGhSJT8=
Subject key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7FFE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Aug 2026 13:41:32 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.58.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 30 Aug 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32766 (0x7ffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 2 13:41:32 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:ae:f4:cd:6a:17:9e:ff:21:2b:83:fd:5f:
3b:75:e8:98:9c:04:8d:c8:4a:14:7b:37:32:eb:77:
e0:0b:b0:0d:63:59:d4:82:2b:97:40:d4:cb:b9:ec:
23:6e:81:2c:de:78:49:b5:7e:d7:26:0b:f9:a4:5f:
2c:66:1d:e5:2f:46:81:96:30:73:21:54:c5:a2:17:
6a:73:5e:80:61:39:6a:96:9c:e2:04:12:06:88:5d:
b0:c9:3b:eb:9d:81:59:8f:59:16:5f:4f:cc:b1:a3:
75:b7:ab:5e:32:a1:ee:65:7c:ae:30:a7:f9:c1:57:
f8:f2:43:5b:fe:7d:d2:66:12:c0:f9:bf:83:4e:cd:
8b:58:9f:bd:8a:9b:d4:6c:a0:a0:1e:db:18:5e:8e:
bf:e5:08:43:fd:89:80:fe:1c:c1:58:18:dc:74:33:
53:f8:19:22:d2:c1:c3:13:fa:97:a6:0c:8d:24:1e:
cb:ad:cb:e5:d9:f4:b4:11:bc:9e:23:d4:da:3d:da:
07:8c:c4:1b:d7:ef:4a:a3:66:9e:a2:0a:96:7f:36:
2d:cc:33:d1:de:74:29:1e:a7:de:55:c1:1b:6a:ba:
0b:84:b1:a4:e8:fb:2d:7a:a9:b3:de:3c:10:5d:8d:
3b:cd:d0:d8:78:d3:0d:fe:9a:39:59:85:79:aa:2f:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9b:fb:d8:b7:f2:bb:66:b5:55:56:b8:7c:39:1a:5f:95:30:
16:3e:a1:de:1d:2d:8f:b2:db:b2:9c:db:ef:2d:f2:19:9a:7f:
a8:71:39:5c:6c:ac:53:1a:37:0e:c0:eb:19:d9:32:d6:67:0d:
d4:c4:3c:d0:c6:73:c1:58:e6:da:04:56:88:64:74:ed:f2:28:
07:79:c9:8c:15:5a:bc:4d:13:32:48:4b:9e:ab:f7:2e:c9:bb:
fe:8c:36:31:3d:be:6e:47:aa:5a:4e:95:c8:e9:3c:d2:77:4e:
ae:3c:93:af:70:da:71:f0:28:ac:04:6f:af:10:bd:7e:a1:ad:
36:6d:bc:1d:5e:87:95:34:3e:80:b2:fb:d0:1e:a3:5b:57:2b:
6f:12:c2:61:66:50:6b:6a:44:8b:b8:f0:71:13:5e:a3:68:ff:
fa:27:cf:6a:f7:fd:9a:cb:af:1f:3e:65:76:95:97:ba:9a:46:
19:63:73:ec:50:40:0c:49:0f:b0:ce:d2:ce:8e:b6:08:4d:22:
a2:cb:ac:39:7a:3a:b7:88:8d:bc:e9:d2:be:69:d1:4d:55:05:
0b:c9:87:94:c9:a6:e2:76:15:d2:c9:42:80:15:0f:f4:b0:7c:
e3:cf:73:97:8a:6d:a6:4f:ce:c5:07:81:54:ae:d4:23:8d:7f:
06:3f:97:74
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICf/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwODAyMTM0MTMyWhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2NTZDNzExMC8GA1UEBRMoNThBMjFFN0IyM0ZBRjIxQjg5RDM0Mjcw
RUI1NkY3NDQ5QzIzOTk4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANRUrvTNahee/yErg/1fO3XomJwEjchKFHs3Mut34AuwDWNZ1IIrl0DUy7nsI26B
LN54SbV+1yYL+aRfLGYd5S9GgZYwcyFUxaIXanNegGE5apac4gQSBohdsMk7652B
WY9ZFl9PzLGjdberXjKh7mV8rjCn+cFX+PJDW/590mYSwPm/g07Ni1ifvYqb1Gyg
oB7bGF6Ov+UIQ/2JgP4cwVgY3HQzU/gZItLBwxP6l6YMjSQey63L5dn0tBG8niPU
2j3aB4zEG9fvSqNmnqIKln82Lcwz0d50KR6n3lXBG2q6C4SxpOj7LXqps948EF2N
O83Q2HjTDf6aOVmFeaovOFkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRYoh57I/ry
G4nTQnDrVvdEnCOZhjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU2QzcvODVERURBRDg1MEE1MTFGMEIyRDFERTRGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY1NkM3Lzg1REVEQUQ4NTBBNTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2
OGh1SjAwSnc2MWIzUkp3am1ZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKVlOjANBgkqhkiG9w0BAQsFAAOCAQEATpv72Lfyu2a1VVa4fDka
X5UwFj6h3h0tj7Lbspzb7y3yGZp/qHE5XGysUxo3DsDrGdky1mcN1MQ80MZzwVjm
2gRWiGR07fIoB3nJjBVavE0TMkhLnqv3Lsm7/ow2MT2+bkeqWk6VyOk80ndOrjyT
r3DacfAorARvrxC9fqGtNm28HV6HlTQ+gLL70B6jW1crbxLCYWZQa2pEi7jwcRNe
o2j/+ifPavf9msuvHz5ldpWXuppGGWNz7FBADEkPsM7Szo62CE0iosusOXo6t4iN
vOnSvmnRTVUFC8mHlMmm4nYV0slCgBUP9LB8489zl4ptpk/OxQeBVK7UI41/Bj+X
dA==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:14:02 2026 by rpki-client