Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
File: fTWFKD3zPrULnDiNWc14bLudw54.cer (raw, json)
Hash identifier: h1tuToAHX8fxvGZqoy85/pGlaDc7RrPUJVo+cAV1nr4=
Subject key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8362
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 09 Oct 2026 07:48:00 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 138.252.206.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33634 (0x8362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 9 07:48:00 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:c8:9a:a3:52:6d:a7:5c:91:95:08:95:2a:
97:bd:20:71:0c:b0:6f:76:5b:0e:b2:10:e9:52:cd:
f9:53:ff:52:7d:72:92:5b:d0:1f:ca:8d:9a:7d:ce:
48:b0:47:f2:ce:35:c6:56:0c:14:b5:69:e5:ea:79:
22:fb:99:db:ec:e6:6f:8a:1d:bc:52:e5:54:46:35:
54:35:df:e2:a2:42:1f:e8:9a:6a:f6:6d:4d:03:fc:
cf:47:96:b4:f2:d7:8e:44:26:53:fe:ae:9d:3b:81:
27:ac:f4:ee:96:84:e4:60:58:a0:6e:0d:a3:99:e7:
af:f2:d0:ef:a8:9c:e2:f7:0c:a0:f8:79:60:3a:1a:
dd:b3:cf:f6:58:eb:f6:a9:2b:c3:f9:cd:33:9a:20:
ef:2d:1d:1b:3f:eb:24:16:4a:e2:b7:99:c9:e4:4a:
3c:58:f0:35:84:09:75:e6:5f:22:a3:12:cf:eb:54:
08:bd:b1:e7:bf:de:ea:d8:92:d1:54:ab:b8:8c:41:
4a:62:c4:4b:e2:e7:9a:f8:d9:72:0d:f7:5f:6d:97:
47:fa:6e:44:6b:48:3f:68:8c:a3:86:66:7f:e3:f7:
87:9a:ad:aa:7e:07:81:ab:09:35:65:b7:d9:87:5f:
5a:17:0a:53:03:d7:05:42:c2:14:29:57:ac:25:02:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.206.0/23
Signature Algorithm: sha256WithRSAEncryption
73:6d:c0:bf:3a:f9:3f:da:93:9a:88:b0:6e:46:6c:96:a5:f3:
41:f8:f1:d9:f3:ad:97:7a:17:b3:a1:3c:fb:63:76:cd:d4:7a:
07:63:a4:48:a7:1f:72:26:bc:a1:c3:bb:df:c6:d0:f6:f5:0e:
72:54:d5:c1:37:d7:72:5b:67:09:ba:df:71:32:cf:8d:c9:aa:
26:35:c6:9d:1e:93:d7:f0:c9:78:9c:42:02:83:67:af:10:3f:
e4:89:8c:48:9c:89:f7:10:7a:4f:ce:ab:2e:46:8a:18:02:27:
d5:56:d8:83:11:cc:74:be:37:ff:ec:e0:6a:57:a3:70:79:36:
61:b0:72:bb:dd:7c:e2:0b:ab:cf:02:a2:01:38:6e:16:4f:26:
cb:ce:d7:66:b0:fd:56:06:92:b2:63:c6:e2:97:3d:4f:75:54:
fa:6d:d9:ce:22:d4:d7:dc:aa:03:1c:63:52:49:7b:36:65:7d:
3a:69:ed:aa:5c:a2:89:fd:53:38:03:a7:90:1f:1f:dc:c4:da:
ed:a6:aa:b5:a3:2d:51:96:ac:2a:7f:eb:f7:67:da:7c:61:a4:
e9:7e:8d:d5:45:89:0d:71:f6:18:06:7d:30:45:e3:92:c9:99:
25:21:9c:61:9f:40:ff:52:96:9e:fe:57:f6:6b:2b:43:f4:94:
ad:0d:7f:06
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAINiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAwOTA3NDgwMFoXDTI4MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzUyRDExMTAvBgNVBAUTKDdEMzU4NTI4M0RGMzNFQjUwQjlDMzg4
RDU5Q0Q3ODZDQkI5REMzOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMDMiao1Jtp1yRlQiVKpe9IHEMsG92Ww6yEOlSzflT/1J9cpJb0B/KjZp9zkiw
R/LONcZWDBS1aeXqeSL7mdvs5m+KHbxS5VRGNVQ13+KiQh/ommr2bU0D/M9HlrTy
145EJlP+rp07gSes9O6WhORgWKBuDaOZ56/y0O+onOL3DKD4eWA6Gt2zz/ZY6/ap
K8P5zTOaIO8tHRs/6yQWSuK3mcnkSjxY8DWECXXmXyKjEs/rVAi9see/3urYktFU
q7iMQUpixEvi55r42XIN919tl0f6bkRrSD9ojKOGZn/j94earap+B4GrCTVlt9mH
X1oXClMD1wVCwhQpV6wlAlqfAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUfTWFKD3z
PrULnDiNWc14bLudw54wHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM1MkQxLzY0QTVBQjg0QzBFQTExRjA5QkE5REI3NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNTJEMS82NEE1QUI4NEMwRUExMUYwOUJBOURCNzRDNEY5QUUwMi9mVFdGS0Qz
elByVUxuRGlOV2MxNGJMdWR3NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGK/M4wDQYJKoZIhvcNAQELBQADggEBAHNtwL86+T/ak5qIsG5G
bJal80H48dnzrZd6F7OhPPtjds3UegdjpEinH3ImvKHDu9/G0Pb1DnJU1cE313Jb
Zwm633Eyz43JqiY1xp0ek9fwyXicQgKDZ68QP+SJjEicifcQek/Oqy5GihgCJ9VW
2IMRzHS+N//s4GpXo3B5NmGwcrvdfOILq88CogE4bhZPJsvO12aw/VYGkrJjxuKX
PU91VPpt2c4i1NfcqgMcY1JJezZlfTpp7apcoon9UzgDp5AfH9zE2u2mqrWjLVGW
rCp/6/dn2nxhpOl+jdVFiQ1x9hgGfTBF45LJmSUhnGGfQP9Slp7+V/ZrK0P0lK0N
fwY=
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:23:45 2026 by rpki-client