Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
File: kRUqIeAuqRr6tsrcHXefkmdRUg0.cer (raw, json)
Hash identifier: Fv/ukCq5kcAScVLSs56AjAltW2kZ5dkm88oYXGT7O7o=
Subject key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B7A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 May 2026 15:46:57 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.132.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31610 (0x7b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 14 15:46:57 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:25:71:83:4f:f2:b9:2f:3b:e2:53:a0:12:
60:0b:69:be:cf:e5:fc:e4:64:cc:b2:98:83:38:95:
b8:1a:f0:9d:aa:7f:27:d8:8d:4d:df:1a:4c:fd:b1:
d6:da:46:4a:7d:31:2f:e5:7a:7a:e5:f4:79:ae:3d:
1e:b1:60:be:94:88:2e:18:c6:94:89:69:71:e0:5c:
57:3e:ec:ac:20:24:3d:10:63:09:5c:27:96:5a:89:
25:5e:78:56:c6:75:4b:67:52:13:6c:cd:77:0f:16:
6b:f9:28:24:ff:76:98:0f:f2:d4:00:45:e1:dd:c6:
58:d0:5e:f4:a4:39:66:5b:77:e7:0a:fe:b1:d1:6a:
3d:69:85:52:1a:f8:22:4b:ba:56:d9:7b:cb:70:8d:
9f:72:26:30:f1:52:29:fd:0a:39:8e:60:8e:58:e5:
8f:5a:1a:aa:26:4b:0b:f0:56:e7:f3:a7:f3:c4:b3:
35:05:9c:3d:d3:12:0b:6b:2c:6a:17:ec:cb:af:81:
57:c4:95:13:68:c4:53:29:e6:9b:cb:37:fa:f2:a6:
46:69:5b:a5:92:98:e0:98:3a:55:51:df:32:e2:5f:
68:6d:fd:29:df:4e:5b:6d:cc:a6:6f:6a:ad:e5:cf:
13:db:2b:b3:95:9d:1f:a7:5e:62:6f:ed:73:fb:9b:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.132.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:fb:c8:6a:c2:69:79:10:61:28:16:09:21:5b:85:b1:61:14:
af:1a:f2:58:2a:86:b7:97:a4:74:3c:b1:90:36:c1:3e:a1:2d:
52:38:70:b5:b7:d9:ff:02:fb:95:7c:29:be:65:78:03:bf:fd:
e3:9a:63:91:d9:37:6b:e2:f6:91:94:34:4f:9a:4e:fb:62:ae:
83:d3:a0:11:8b:c1:7a:5d:bd:9d:11:76:35:d0:e0:92:56:eb:
43:e3:5b:38:0e:5a:f0:53:fe:8d:89:87:19:82:7c:04:4c:86:
3a:10:cf:b0:bc:02:c6:9c:02:18:c9:98:eb:5d:74:74:44:de:
b3:94:ac:e0:ef:c5:64:dd:26:74:bb:15:8d:4b:ef:80:6a:a0:
99:9c:df:cc:8a:64:9d:4d:12:70:eb:b0:40:11:28:34:1c:32:
7e:8d:1d:d5:15:c7:c5:ac:a1:2b:86:9a:39:eb:b5:26:f6:d3:
cc:87:c5:32:ff:2d:0d:ec:e3:95:49:49:c1:b4:8c:bd:b7:1d:
e6:cd:c0:3f:05:80:9e:1d:ec:f5:78:47:a3:13:69:98:9d:c6:
9e:cf:98:24:27:2a:71:03:de:64:fb:7b:04:c1:75:7e:6f:ec:
49:b3:cf:a0:4c:38:bf:e8:f7:ba:7f:28:0c:24:3b:b4:44:68:
c4:84:4c:23
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICe3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNTE0MTU0NjU3WhcNMjcwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURD
MUQ3NzlGOTI2NzUxNTIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALSTJXGDT/K5LzviU6ASYAtpvs/l/ORkzLKYgziVuBrwnap/J9iNTd8aTP2x1tpG
Sn0xL+V6euX0ea49HrFgvpSILhjGlIlpceBcVz7srCAkPRBjCVwnllqJJV54VsZ1
S2dSE2zNdw8Wa/koJP92mA/y1ABF4d3GWNBe9KQ5Zlt35wr+sdFqPWmFUhr4Iku6
Vtl7y3CNn3ImMPFSKf0KOY5gjljlj1oaqiZLC/BW5/On88SzNQWcPdMSC2ssahfs
y6+BV8SVE2jEUynmm8s3+vKmRmlbpZKY4Jg6VVHfMuJfaG39Kd9OW23Mpm9qreXP
E9srs5WdH6deYm/tc/ubQUMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSRFSoh4C6p
Gvq2ytwdd5+SZ1FSDTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVDMzQvMjBFRDEyQjQ0RkFDMTFGMTkxNjQzMjk3OUU4MzM3NzMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY1QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1
cVJyNnRzcmNIWGVma21kUlVnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaIEhDANBgkqhkiG9w0BAQsFAAOCAQEAmvvIasJpeRBhKBYJIVuF
sWEUrxryWCqGt5ekdDyxkDbBPqEtUjhwtbfZ/wL7lXwpvmV4A7/945pjkdk3a+L2
kZQ0T5pO+2Kug9OgEYvBel29nRF2NdDgklbrQ+NbOA5a8FP+jYmHGYJ8BEyGOhDP
sLwCxpwCGMmY6110dETes5Ss4O/FZN0mdLsVjUvvgGqgmZzfzIpknU0ScOuwQBEo
NBwyfo0d1RXHxayhK4aaOeu1JvbTzIfFMv8tDezjlUlJwbSMvbcd5s3APwWAnh3s
9XhHoxNpmJ3Gns+YJCcqcQPeZPt7BMF1fm/sSbPPoEw4v+j3un8oDCQ7tERoxIRM
Iw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:37 2026 by rpki-client