Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.cer (raw, json)
Hash identifier: BIUmjx8IBWZ3NqUkjOCPnNqF5rKLgQegxrA5BjcPOns=
Subject key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 13:58:03 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 146.88.24.0/22
IP: 164.52.192.0/19
IP: 205.147.96.0/21
IP: 205.147.108.0/22
IP: 216.48.176.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33462 (0x82b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 25 13:58:03 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:ee:18:05:09:02:51:be:f7:6a:c3:7c:d7:
2f:c9:36:a6:30:03:a8:34:7d:2f:a6:d6:db:13:43:
e0:c6:53:0a:7a:26:4a:f0:b0:28:74:71:67:3f:5f:
6b:a0:19:1b:0e:ba:97:09:35:d8:fb:18:70:fd:f6:
72:9c:99:19:2a:fc:8e:f5:b9:2a:d3:db:26:26:b9:
89:48:e7:5c:dd:6c:76:07:ea:70:09:72:5e:5f:15:
fc:d8:b9:81:e0:c2:2e:04:f2:20:09:21:d9:d2:82:
98:7e:ec:96:69:df:71:fb:66:8e:63:a0:2a:38:e2:
76:9a:7b:8e:81:65:67:d2:e0:a5:5b:cf:30:69:82:
89:85:c0:9e:e8:d9:85:55:7a:08:41:ff:e2:fe:86:
5b:36:a5:3e:41:75:3c:d9:47:4e:ad:b7:b3:f5:26:
4a:f8:27:f6:13:e6:71:46:9c:02:f3:90:26:ba:40:
c3:97:90:4f:28:2e:f1:fc:65:95:ef:2c:79:c6:2e:
93:aa:c6:d1:e5:01:41:9e:92:cc:41:c7:97:74:aa:
b6:b9:a7:7c:f4:f8:d2:bf:7f:b7:4a:2f:d5:f0:db:
9a:6b:f6:0a:e4:a4:e9:63:7a:0e:b5:9a:24:60:7b:
07:ec:b6:61:c3:86:3c:ae:85:11:16:27:f6:ec:df:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.24.0/22
164.52.192.0/19
205.147.96.0/21
205.147.108.0/22
216.48.176.0/20
Signature Algorithm: sha256WithRSAEncryption
92:f7:f2:d8:45:81:57:ce:8b:16:21:74:a0:a9:08:38:f3:ea:
7c:2c:e4:91:7f:f1:14:d1:fc:1a:38:46:6e:b4:b5:57:d0:2c:
c7:85:b3:3c:ce:48:65:5c:6f:51:10:a6:0c:4a:7e:f1:31:d3:
d3:78:73:4f:63:aa:bc:47:24:af:95:ab:aa:7e:21:95:06:e0:
6f:44:dd:b6:f1:87:f2:a1:8d:40:0b:6b:a0:48:0b:6e:f7:96:
4c:fc:e2:87:b6:c8:b8:59:41:d7:61:7b:4f:74:11:31:d9:52:
2c:78:d3:14:fd:6d:08:8e:89:71:5e:e4:42:d3:ba:6f:9e:97:
f3:04:10:90:d9:4a:d1:f7:97:58:29:59:fc:40:60:f2:45:27:
2e:e4:ef:a0:44:4b:31:14:a1:3e:89:20:b5:39:2e:6c:00:68:
47:23:7a:55:50:a0:62:40:ec:73:16:b2:6d:02:67:1c:ff:61:
9e:34:61:ca:17:1d:2d:22:6a:a0:9e:df:18:4b:09:52:95:f5:
27:bf:ba:c7:c2:4e:a4:9a:4b:48:3d:0e:29:32:3c:b1:5e:f4:
b7:15:f5:cc:20:aa:27:a4:f1:fc:f8:07:06:14:88:55:9a:de:
bf:a9:0d:f7:f3:9a:45:49:8b:c2:9f:da:8e:dd:fc:d8:95:86:
21:1a:4c:c7
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIDAIK2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkyNTEzNTgwM1oXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUx
RDE4RjFENjNERUMwQTZFMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9Ju4YBQkCUb73asN81y/JNqYwA6g0fS+m1tsTQ+DGUwp6JkrwsCh0cWc/X2ug
GRsOupcJNdj7GHD99nKcmRkq/I71uSrT2yYmuYlI51zdbHYH6nAJcl5fFfzYuYHg
wi4E8iAJIdnSgph+7JZp33H7Zo5joCo44naae46BZWfS4KVbzzBpgomFwJ7o2YVV
eghB/+L+hls2pT5BdTzZR06tt7P1Jkr4J/YT5nFGnALzkCa6QMOXkE8oLvH8ZZXv
LHnGLpOqxtHlAUGeksxBx5d0qra5p3z0+NK/f7dKL9Xw25pr9grkpOljeg61miRg
ewfstmHDhjyuhREWJ/bs34VVAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUZd/y7j+b
suskVR4dGPHWPewKbhcwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUREQ0I2L0U4ODNERkQ2Q0MzRDExRUE4QkM0NUMyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2ot
YnN1c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8EKDAm
MCQEAgABMB4DBAKSWBgDBAWkNMADBAPNk2ADBALNk2wDBATYMLAwDQYJKoZIhvcN
AQELBQADggEBAJL38thFgVfOixYhdKCpCDjz6nws5JF/8RTR/Bo4Rm60tVfQLMeF
szzOSGVcb1EQpgxKfvEx09N4c09jqrxHJK+Vq6p+IZUG4G9E3bbxh/KhjUALa6BI
C273lkz84oe2yLhZQddhe090ETHZUix40xT9bQiOiXFe5ELTum+el/MEEJDZStH3
l1gpWfxAYPJFJy7k76BESzEUoT6JILU5LmwAaEcjelVQoGJA7HMWsm0CZxz/YZ40
YcoXHS0iaqCe3xhLCVKV9Se/usfCTqSaS0g9DikyPLFe9LcV9cwgqiek8fz4BwYU
iFWa3r+pDffzmkVJi8Kf2o7d/NiVhiEaTMc=
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:44:49 2026 by rpki-client