
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
File: oXIQwPgrRl5webuW88SZw_xMCog.cer (raw, json)
Hash identifier: 1pVNyZefo7Gfvyay8cB9v6Ldvqov+lPtx37XIdUsles=
Subject key identifier: A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E04
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Jul 2026 11:02:01 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.58.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32260 (0x7e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 2 11:02:01 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91E208A, serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:47:19:4e:16:8f:77:90:47:77:49:7e:c2:
89:a2:28:2e:6b:29:c2:9d:1e:57:45:6b:ca:1e:bf:
31:c6:39:e7:56:a2:a1:56:6b:c9:57:88:bf:91:90:
6a:18:3d:52:cd:c9:b1:63:27:9c:93:29:32:08:82:
b4:78:96:60:44:e6:b5:99:c0:4a:91:05:9c:75:49:
94:58:5d:eb:54:3b:55:73:f8:f9:72:16:1d:f6:38:
57:77:13:40:1a:55:ca:fe:6e:b4:ef:d7:5c:86:96:
c2:eb:df:97:66:8b:a4:3a:9c:78:a6:7e:5e:d2:63:
6d:ae:07:d1:11:83:8d:82:9a:7d:45:ef:0a:1a:1c:
5a:86:28:54:f7:8a:c7:c7:38:33:5c:19:c2:ca:95:
cd:8a:bf:c6:3e:2d:9b:a4:ad:92:35:31:89:7d:f6:
8d:32:bf:de:41:41:40:5e:3d:b5:27:73:1a:6a:4e:
9e:32:87:a6:ec:99:cf:da:d3:e3:11:d6:62:72:24:
c4:cd:24:03:3c:82:fb:df:bf:a4:2a:d8:ef:e9:82:
79:50:d0:ed:ff:8e:43:c5:80:2d:cb:9a:30:76:c9:
5c:ab:a4:43:fe:b1:9b:2f:91:45:a8:b4:d1:e0:1a:
f5:a8:c6:e5:a8:8c:8c:77:ed:d5:c0:18:92:a8:28:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.58.0/23
Signature Algorithm: sha256WithRSAEncryption
46:6b:54:f0:fb:f4:3d:68:10:fa:cc:e6:d5:90:fd:ff:14:25:
60:e0:55:66:54:bc:74:0e:f1:44:b7:da:00:8a:b2:75:0f:0f:
7a:95:a8:2f:59:d1:b8:d0:09:4f:3d:8b:5b:d9:64:bd:1d:39:
b4:ce:9d:10:30:74:50:1e:41:83:6e:58:90:1c:22:a6:92:b3:
f2:08:2f:ee:a6:3d:bb:d0:0d:82:6b:15:75:f3:8a:b1:67:49:
a8:21:9f:05:44:90:07:5a:0d:33:e4:08:1a:bc:8f:d9:18:54:
a5:9b:2f:e9:6f:47:41:d4:62:7d:f3:b3:63:a8:2c:a3:fd:1f:
6c:a5:ee:67:93:5f:ae:e4:fe:d9:6b:df:01:b4:d5:79:3f:9f:
28:2b:a4:a8:a4:bf:18:f2:dd:97:6c:89:00:1f:34:a2:95:02:
09:d5:a1:f4:65:d3:32:b4:d7:74:d8:5a:74:ff:e0:39:bb:23:
4c:cf:da:cf:70:7f:ca:5d:35:0e:09:66:c0:9f:0e:2c:ad:41:
e7:82:79:d3:27:86:ee:ea:41:cf:b6:25:51:6c:70:e8:fe:d4:
56:88:c7:fd:9f:5c:bd:65:ba:bb:9e:fa:e1:8c:0c:d8:bd:ae:
a2:c0:c9:20:47:7a:85:9b:2e:ce:b4:8d:c0:44:59:ea:07:45:
7f:dc:87:d6
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzAyMTEwMjAxWhcNMjcxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFMjA4QTExMC8GA1UEBRMoQTE3MjEwQzBGODJCNDY1RTcwNzlCQjk2
RjNDNDk5QzNGQzRDMEE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANZXRxlOFo93kEd3SX7CiaIoLmspwp0eV0Vryh6/McY551aioVZryVeIv5GQahg9
Us3JsWMnnJMpMgiCtHiWYETmtZnASpEFnHVJlFhd61Q7VXP4+XIWHfY4V3cTQBpV
yv5utO/XXIaWwuvfl2aLpDqceKZ+XtJjba4H0RGDjYKafUXvChocWoYoVPeKx8c4
M1wZwsqVzYq/xj4tm6StkjUxiX32jTK/3kFBQF49tSdzGmpOnjKHpuyZz9rT4xHW
YnIkxM0kAzyC+9+/pCrY7+mCeVDQ7f+OQ8WALcuaMHbJXKukQ/6xmy+RRai00eAa
9ajG5aiMjHft1cAYkqgoIi0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBShchDA+CtG
XnB5u5bzxJnD/EwKiDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTIwOEEvNzBFNUEyMjA3NjA1MTFGMUI2MzE2NkRGNzlBMzBGQkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUyMDhBLzcwRTVBMjIwNzYwNTExRjFCNjMxNjZERjc5QTMwRkJDL29YSVF3UGdy
Umw1d2VidVc4OFNad194TUNvZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaDsOjANBgkqhkiG9w0BAQsFAAOCAQEARmtU8Pv0PWgQ+szm1ZD9
/xQlYOBVZlS8dA7xRLfaAIqydQ8PepWoL1nRuNAJTz2LW9lkvR05tM6dEDB0UB5B
g25YkBwippKz8ggv7qY9u9ANgmsVdfOKsWdJqCGfBUSQB1oNM+QIGryP2RhUpZsv
6W9HQdRiffOzY6gso/0fbKXuZ5NfruT+2WvfAbTVeT+fKCukqKS/GPLdl2yJAB80
opUCCdWh9GXTMrTXdNhadP/gObsjTM/az3B/yl01DglmwJ8OLK1B54J50yeG7upB
z7YlUWxw6P7UVojH/Z9cvWW6u5764YwM2L2uosDJIEd6hZsuzrSNwERZ6gdFf9yH
1g==
-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:23 2026 by rpki-client