Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/az_LMt4zN9LZDsjLsKICQoV60Ro.cer
File: az_LMt4zN9LZDsjLsKICQoV60Ro.cer (raw, json)
Hash identifier: EOyE+9kjo210Up6nRD54+BlrgjHBsxHwXPwJtRBzx2M=
Subject key identifier: 6B:3F:CB:32:DE:33:37:D2:D9:0E:C8:CB:B0:A2:02:42:85:7A:D1:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82AA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/az_LMt4zN9LZDsjLsKICQoV60Ro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 07:34:22 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 192.146.189.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33450 (0x82aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 25 07:34:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91BB63F, serialNumber=6B3FCB32DE3337D2D90EC8CBB0A20242857AD11A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:4c:f1:ac:90:b2:44:51:05:74:60:6a:43:
3d:5a:4a:5a:3a:a0:7b:8a:8e:79:c7:16:fb:10:92:
2d:c7:09:71:8d:f7:3a:d9:39:14:9e:e4:0a:0a:5a:
ca:90:49:64:01:75:83:e6:2c:44:61:4d:7a:41:55:
73:4d:28:e8:06:67:18:55:3e:19:4a:09:a2:54:f7:
38:7e:d8:5e:a0:72:f2:6a:ca:1b:b6:d3:e3:8c:76:
a3:cd:09:52:ff:35:12:3b:0d:ee:58:97:9e:3f:18:
49:22:df:60:21:4e:e4:8e:1c:b9:e4:38:ce:af:05:
84:e8:8b:38:93:1c:20:8e:f7:e7:b7:cc:b8:02:00:
33:7b:2a:af:15:c9:30:7b:e1:fb:02:d0:4d:2f:ca:
7a:a9:d4:00:86:20:d0:cc:1e:b2:b0:36:da:33:48:
6a:1f:5d:0c:9d:5e:b7:7d:66:79:79:42:5c:c5:85:
a5:d1:df:62:62:12:8d:c2:83:c2:52:df:4d:dd:a6:
2d:9c:93:d3:6f:2c:4c:93:d9:53:f1:57:5d:85:4e:
98:b4:6e:66:63:1a:20:fd:1c:70:a7:b5:bb:db:d2:
26:a1:72:fb:92:d4:65:d9:b0:28:6c:12:2c:2a:06:
f1:15:31:78:75:39:fb:b9:7c:48:67:cf:b8:b8:48:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:CB:32:DE:33:37:D2:D9:0E:C8:CB:B0:A2:02:42:85:7A:D1:1A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/az_LMt4zN9LZDsjLsKICQoV60Ro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.146.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6e:60:04:02:b4:82:3b:a2:d3:dc:41:ce:4d:6f:39:f5:40:
cd:d8:78:de:d8:71:59:16:90:9a:ba:33:4b:f1:4b:0f:c3:cd:
bd:8e:9b:d9:cd:50:9c:67:f3:6a:8f:c8:51:15:5c:18:40:c5:
b5:fb:f3:f0:a7:c9:60:53:74:4e:50:8a:b7:f5:f4:91:67:e4:
21:91:6a:04:5d:f3:b5:02:db:b3:58:63:4d:ff:47:b4:55:d8:
2c:30:a3:d8:31:a0:cc:70:79:b0:eb:b4:23:bb:9f:5e:35:66:
e7:c9:23:d2:9c:c2:44:65:b9:b3:7c:87:d9:e0:d8:71:a1:79:
d0:45:4c:9f:ca:18:02:9e:72:c3:e5:38:d5:bf:38:cd:c9:6e:
b3:5d:7d:6e:3c:8a:fb:f8:25:41:f7:4f:b5:55:ee:e9:45:40:
33:6d:92:54:2c:de:22:25:88:12:8c:fd:16:6d:ea:01:9d:5f:
71:a5:08:17:60:85:94:8e:4e:d9:ba:27:cb:45:7c:56:93:61:
ac:f5:00:7b:a8:16:f8:2c:2b:a5:65:6d:e1:44:52:a0:64:7d:
13:8d:db:9f:73:3e:fb:2f:00:bb:84:8c:39:10:89:de:5b:a6:
4c:1e:d9:94:e6:3d:88:be:30:c1:48:08:73:29:2d:a6:f8:d8:
81:7a:a2:28
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIKqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkyNTA3MzQyMloXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkI2M0YxMTAvBgNVBAUTKDZCM0ZDQjMyREUzMzM3RDJEOTBFQzhD
QkIwQTIwMjQyODU3QUQxMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQV0zxrJCyRFEFdGBqQz1aSlo6oHuKjnnHFvsQki3HCXGN9zrZORSe5AoKWsqQ
SWQBdYPmLERhTXpBVXNNKOgGZxhVPhlKCaJU9zh+2F6gcvJqyhu20+OMdqPNCVL/
NRI7De5Yl54/GEki32AhTuSOHLnkOM6vBYToiziTHCCO9+e3zLgCADN7Kq8VyTB7
4fsC0E0vynqp1ACGINDMHrKwNtozSGofXQydXrd9Znl5QlzFhaXR32JiEo3Cg8JS
303dpi2ck9NvLEyT2VPxV12FTpi0bmZjGiD9HHCntbvb0iahcvuS1GXZsChsEiwq
BvEVMXh1Ofu5fEhnz7i4SCaFAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUaz/LMt4z
N9LZDsjLsKICQoV60RowHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJCNjNGLzgzODA4RjU4QjhCMzExRjFCNTQ0NzA3RTY5MTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQjYzRi84MzgwOEY1OEI4QjMxMUYxQjU0NDcwN0U2OTExRjk3MC9hel9MTXQ0
ek45TFpEc2pMc0tJQ1FvVjYwUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADAkr0wDQYJKoZIhvcNAQELBQADggEBACtuYAQCtII7otPcQc5N
bzn1QM3YeN7YcVkWkJq6M0vxSw/Dzb2Om9nNUJxn82qPyFEVXBhAxbX78/CnyWBT
dE5Qirf19JFn5CGRagRd87UC27NYY03/R7RV2Cwwo9gxoMxwebDrtCO7n141ZufJ
I9KcwkRlubN8h9ng2HGhedBFTJ/KGAKecsPlONW/OM3JbrNdfW48ivv4JUH3T7VV
7ulFQDNtklQs3iIliBKM/RZt6gGdX3GlCBdghZSOTtm6J8tFfFaTYaz1AHuoFvgs
K6VlbeFEUqBkfRON259zPvsvALuEjDkQid5bpkwe2ZTmPYi+MMFICHMpLab42IF6
oig=
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:37 2026 by rpki-client