Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer (raw, json)
Hash identifier: m/oMYxm2zdn4aR6AyzlIyMDHcVJqb+Aq5pGXutW0a0Y=
Subject key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8329
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 13:48:05 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 159.226.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33577 (0x8329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 2 13:48:05 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:53:6b:c7:6c:3c:74:9e:8a:82:c8:0b:0c:
12:22:45:4b:46:e3:bb:57:a9:8a:78:13:da:76:6b:
5d:b7:d5:85:e2:ab:81:8c:66:e8:7a:73:96:f5:37:
7d:b8:35:ed:a8:2c:61:72:b6:da:40:a3:93:7a:b7:
4c:ff:e9:5f:8e:a2:c5:5a:93:1d:af:d1:a4:cf:0f:
29:92:21:8e:bc:bf:8c:5b:c1:6d:c4:34:02:cc:b8:
12:ed:9f:b2:ea:a9:5a:c1:d0:f2:44:75:e0:8b:2a:
9f:ca:10:40:54:15:37:89:3b:bf:4d:3c:1c:37:6f:
64:e9:59:db:60:b6:2f:c0:0f:2a:cd:50:cd:1c:c5:
db:c4:cc:c8:b5:0d:8a:14:0f:fe:17:80:38:1b:c4:
cb:c6:f7:7e:3f:0e:54:2c:8d:77:e4:1b:be:e9:5b:
e5:42:53:9c:7a:a9:02:7f:ed:ee:7f:ff:21:c9:d4:
f4:0a:55:0a:33:c3:ab:a7:d3:20:49:d0:be:95:6c:
f8:ee:5e:7f:16:8e:5f:f3:02:f0:50:09:ef:f3:80:
47:75:98:ed:e3:0d:d9:79:45:ec:4a:b2:10:0a:40:
fa:88:6c:e9:70:df:c0:70:7f:4b:a7:76:3c:02:8a:
0a:d5:58:ee:7d:f6:f4:63:fd:51:e5:04:22:f7:4f:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
159.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:25:ca:6a:66:68:a8:88:37:f8:49:0a:d5:07:e4:52:83:2b:
cc:e6:16:43:13:11:c6:5f:c3:20:62:55:3d:2f:38:f0:69:71:
b4:40:d2:aa:c5:1c:d2:dc:c0:b5:37:13:4b:41:57:b5:36:e1:
3f:69:81:08:59:c6:ed:1d:cb:26:e6:12:48:fd:b9:01:57:b2:
12:72:6a:cb:06:a8:43:fb:17:c3:ba:b8:8a:d6:42:d3:27:b6:
ec:3c:ce:36:17:80:92:6c:e8:1c:a2:30:f7:24:04:6b:fd:64:
03:4c:90:72:78:60:5f:d9:f7:c5:8f:dc:8b:15:ca:58:ef:7b:
5b:7b:b2:1f:7a:40:fc:87:cd:48:78:06:43:4b:96:79:7b:b3:
90:9b:5a:fa:77:2b:66:1b:6d:ec:ef:95:05:15:c0:fd:83:76:
47:df:1b:74:2e:46:6e:18:fc:47:dc:8c:08:24:8d:51:d2:62:
f9:05:76:1e:dd:ae:d3:2e:e3:54:11:89:34:b8:7d:24:fa:ec:
3d:56:70:2f:ea:8c:54:b3:4d:04:26:e4:ab:8c:97:2c:07:e6:
f9:30:28:86:13:01:e4:87:23:c7:06:65:f8:fa:31:51:e3:c2:
0a:f9:0a:2b:47:ac:49:05:ad:38:d6:3f:94:2b:f0:55:78:68:
7a:ed:f4:f2
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgIDAIMpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAwMjEzNDgwNVoXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTU4QUExMTAvBgNVBAUTKDk2NzNCNUNDRjBBOEVBNUNFNDFBMkU0
NzYzMTFGMzc1Q0Q4M0MwRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6llNrx2w8dJ6KgsgLDBIiRUtG47tXqYp4E9p2a1231YXiq4GMZuh6c5b1N324
Ne2oLGFyttpAo5N6t0z/6V+OosVakx2v0aTPDymSIY68v4xbwW3ENALMuBLtn7Lq
qVrB0PJEdeCLKp/KEEBUFTeJO79NPBw3b2TpWdtgti/ADyrNUM0cxdvEzMi1DYoU
D/4XgDgbxMvG934/DlQsjXfkG77pW+VCU5x6qQJ/7e5//yHJ1PQKVQozw6un0yBJ
0L6VbPjuXn8Wjl/zAvBQCe/zgEd1mO3jDdl5RexKshAKQPqIbOlw38Bwf0undjwC
igrVWO599vRj/VHlBCL3T6g3AgMBAAGjggLyMIIC7jAdBgNVHQ4EFgQUlnO1zPCo
6lzkGi5HYxHzdc2DwNIwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE1OEFBL0MxOTM5Q0U2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNThBQS9DMTkzOUNFNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBD
bzZsemtHaTVIWXhIemRjMkR3TkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzAN
MAsEAgABMAUDAwCf4jANBgkqhkiG9w0BAQsFAAOCAQEAWyXKamZoqIg3+EkK1Qfk
UoMrzOYWQxMRxl/DIGJVPS848GlxtEDSqsUc0tzAtTcTS0FXtTbhP2mBCFnG7R3L
JuYSSP25AVeyEnJqywaoQ/sXw7q4itZC0ye27DzONheAkmzoHKIw9yQEa/1kA0yQ
cnhgX9n3xY/cixXKWO97W3uyH3pA/IfNSHgGQ0uWeXuzkJta+ncrZhtt7O+VBRXA
/YN2R98bdC5Gbhj8R9yMCCSNUdJi+QV2Ht2u0y7jVBGJNLh9JPrsPVZwL+qMVLNN
BCbkq4yXLAfm+TAohhMB5IcjxwZl+PoxUePCCvkKK0esSQWtONY/lCvwVXhoeu30
8g==
-----END CERTIFICATE-----
Generated at Sun Oct 18 02:02:21 2026 by rpki-client