
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer (raw, json)
Hash identifier: DjNBu4KA6x1B22OkKh/geSPn4blRFnTbZhUG88ydVio=
Subject key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8180
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 29 Aug 2026 13:04:39 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 161.121.128.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 07:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33152 (0x8180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 29 13:04:39 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:99:e3:e8:9e:3a:55:3d:3c:48:b0:4c:3f:
96:b0:0f:dd:31:9b:8e:76:29:db:6d:01:bc:9c:8f:
15:75:1b:31:5b:30:ea:1e:b1:2e:c8:69:4a:70:c1:
57:18:e7:64:a3:f3:5d:e4:1a:6e:a9:4e:1a:fd:d9:
ed:41:30:74:10:e5:61:b6:4f:31:64:24:59:97:48:
63:4d:08:67:71:6a:8b:86:c9:2b:c0:81:30:f2:fa:
7b:e1:74:7d:1a:d6:b9:ad:0a:35:5a:65:8b:d3:76:
96:e1:db:fa:a7:15:a5:24:ff:84:4a:e1:2e:7b:ad:
30:10:2d:bb:09:62:8f:51:6b:cd:bf:4d:ea:c1:03:
7d:90:d0:3c:b1:a2:83:2e:71:14:04:ca:bd:5b:5f:
12:5f:25:55:e0:cf:88:ca:3d:92:70:f8:c1:b7:bc:
3f:39:75:76:3e:10:1d:f5:7b:4b:bc:f9:1c:19:e7:
4c:66:fb:74:0c:88:6a:88:82:9d:87:07:81:b2:46:
1f:01:62:e0:4f:55:51:21:29:50:71:0f:78:9c:86:
b8:25:cc:51:97:a1:92:c0:f3:00:37:52:c5:34:03:
d3:1a:d3:49:a7:ca:3f:d3:72:9b:d2:de:04:69:12:
c0:e4:ae:c8:e9:6e:14:26:49:58:8c:10:81:28:20:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.121.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:83:2b:cb:ae:52:11:90:09:e7:55:24:66:6b:28:ae:73:3c:
c1:60:f2:eb:b9:eb:82:c2:dd:a5:54:96:7e:f2:c6:0d:05:92:
a7:10:09:4e:13:da:ac:8e:a1:f9:b7:ad:d9:38:b3:9f:10:70:
09:1b:a9:a6:bc:0b:cd:0f:d3:91:18:66:11:fe:5e:d9:ff:e4:
33:75:aa:5a:6b:f9:17:a5:99:a6:c2:cd:f9:bd:cb:1d:1a:4b:
4f:cb:20:a8:9c:31:fc:d5:4a:72:66:90:14:9a:6e:83:4b:39:
21:22:43:11:2c:46:81:3e:19:c4:1c:52:72:d7:75:5d:23:86:
2f:68:3e:4d:33:38:0c:60:f2:db:59:c9:6b:1b:ee:d8:1b:35:
5e:15:f1:af:91:4a:22:02:55:86:a6:d1:80:a2:82:d7:97:42:
a3:55:41:e6:ee:70:16:4a:b0:35:ed:a4:18:ec:42:99:8c:91:
d0:a2:6a:e4:12:5c:59:61:42:cf:4b:bb:23:5d:0b:76:a9:67:
99:da:53:42:bc:54:1b:7f:f8:1a:ed:04:b8:74:cb:94:4c:21:
f2:44:87:b1:ac:b2:81:94:d0:72:7b:aa:e6:f1:a7:30:7b:f5:
78:42:ed:6e:9b:53:f8:fa:61:bf:2e:07:8b:4d:a3:c0:c2:99:
96:fe:91:f3
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIGAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgyOTEzMDQzOVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0
MTRCQjc3REFGRUJDRTc2NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCm0pnj6J46VT08SLBMP5awD90xm452KdttAbycjxV1GzFbMOoesS7IaUpwwVcY
52Sj813kGm6pThr92e1BMHQQ5WG2TzFkJFmXSGNNCGdxaouGySvAgTDy+nvhdH0a
1rmtCjVaZYvTdpbh2/qnFaUk/4RK4S57rTAQLbsJYo9Ra82/TerBA32Q0DyxooMu
cRQEyr1bXxJfJVXgz4jKPZJw+MG3vD85dXY+EB31e0u8+RwZ50xm+3QMiGqIgp2H
B4GyRh8BYuBPVVEhKVBxD3ichrglzFGXoZLA8wA3UsU0A9Ma00mnyj/TcpvS3gRp
EsDkrsjpbhQmSViMEIEoILOFAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUe5ztyDKA
KKdFbpxBS7d9r+vOdl8wHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZEMzZBL0M2REQ1MUI0NzM2RjExRUU5MTdEMDMzNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURL
QUtLZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAWheYAwDQYJKoZIhvcNAQELBQADggEBAKKDK8uuUhGQCedVJGZr
KK5zPMFg8uu564LC3aVUln7yxg0FkqcQCU4T2qyOofm3rdk4s58QcAkbqaa8C80P
05EYZhH+Xtn/5DN1qlpr+RelmabCzfm9yx0aS0/LIKicMfzVSnJmkBSaboNLOSEi
QxEsRoE+GcQcUnLXdV0jhi9oPk0zOAxg8ttZyWsb7tgbNV4V8a+RSiICVYam0YCi
gteXQqNVQebucBZKsDXtpBjsQpmMkdCiauQSXFlhQs9LuyNdC3apZ5naU0K8VBt/
+BrtBLh0y5RMIfJEh7GssoGU0HJ7qubxpzB79XhC7W6bU/j6Yb8uB4tNo8DCmZb+
kfM=
-----END CERTIFICATE-----
Generated at Mon Aug 31 12:57:13 2026 by rpki-client