Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
File: s6HqYHo_df54qoQuuJCSWZEQ_cY.cer (raw, json)
Hash identifier: E2xLZLZoI8QdxQR322WWWCbgiowTHyIQDV69czVhlTg=
Subject key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 72E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Jan 2026 14:39:53 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Feb 2026 00:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29408 (0x72e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jan 27 14:39:53 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:48:69:c3:ad:5b:ff:b2:bd:fa:5e:d5:7c:
3f:67:02:c8:4b:a9:45:02:be:a0:2e:33:a5:94:b1:
11:fd:4e:6b:aa:d4:8a:e9:a3:16:bf:bd:e3:c4:ef:
f8:59:6c:f6:74:96:5b:dd:f4:27:b3:92:df:a4:43:
ac:3f:6a:e9:26:dd:d4:d0:38:86:de:93:f9:cc:c3:
97:c3:6d:64:6c:87:d9:ba:6f:f0:b7:cc:b2:7f:24:
2e:c4:40:60:5c:59:d5:1b:b0:0a:4f:41:a2:ea:7a:
a6:4c:d7:52:cd:97:e0:09:9c:53:ad:67:ba:26:43:
7d:8a:96:1a:13:5e:34:ea:13:31:7f:05:23:9e:dc:
c8:87:8c:82:13:bb:91:cf:e3:d1:1f:69:81:c6:7a:
dd:bc:4d:a9:e1:9c:e6:ca:1e:b5:d5:32:67:32:70:
49:b7:e3:76:51:12:25:a8:82:e0:08:45:c7:8f:b3:
a2:97:cf:c2:b5:dd:8a:34:99:27:ce:38:72:15:f2:
8b:4d:55:3f:5d:3e:2d:0e:df:b8:ad:be:53:cc:af:
3d:3a:29:c5:48:f9:a1:46:7b:9c:66:4a:df:23:b3:
c1:74:eb:e8:88:6b:ac:41:ca:a1:d2:24:1f:4a:7f:
b5:16:7b:7c:40:08:5e:94:4e:84:b5:dd:2d:7a:d6:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:4a:15:56:9a:3b:69:2d:d4:f8:02:6a:01:69:af:50:4b:0c:
19:7e:0e:1a:2b:e7:88:de:47:7d:1c:84:81:ee:64:64:72:6d:
85:15:4a:92:62:ab:03:ca:4c:87:7c:2c:26:7e:2c:ad:be:f4:
72:d5:19:e2:2f:11:db:78:91:4c:d5:20:f9:e1:dc:f9:73:1a:
78:7f:52:12:37:d4:e5:cf:e9:f8:5c:f9:04:8c:1e:dd:a9:1c:
73:42:25:63:c4:22:ca:70:44:63:48:a7:24:2d:8d:b6:81:a6:
c4:f7:3d:de:16:cc:82:42:82:ef:ca:b3:b9:25:85:74:1a:2f:
ef:9a:e2:63:b9:d4:65:cd:38:94:c9:a9:a6:d8:81:04:51:9e:
a9:9a:2d:69:07:33:85:eb:2b:95:89:bb:7f:fc:33:3c:49:58:
71:8e:87:a8:cf:b1:09:7a:1f:e2:af:ff:38:73:5d:85:e2:62:
f4:0f:ee:97:e4:00:bf:23:69:04:2c:49:c1:f8:87:46:41:35:
90:2c:66:16:37:27:bb:0b:bd:b9:d9:98:a2:25:af:14:9d:59:
84:05:c0:b4:43:d8:41:05:fc:a2:e4:bb:c9:20:60:1c:bc:eb:
6a:ba:6b:04:29:0a:15:7c:c6:3b:70:b9:2b:28:6c:43:0b:ff:
15:87:08:cc
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICcuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMTI3MTQzOTUzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTFGNUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJF
Qjg5MDkyNTk5MTEwRkRDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKIaSGnDrVv/sr36XtV8P2cCyEupRQK+oC4zpZSxEf1Oa6rUiumjFr+948Tv+Fls
9nSWW930J7OS36RDrD9q6Sbd1NA4ht6T+czDl8NtZGyH2bpv8LfMsn8kLsRAYFxZ
1RuwCk9Boup6pkzXUs2X4AmcU61nuiZDfYqWGhNeNOoTMX8FI57cyIeMghO7kc/j
0R9pgcZ63bxNqeGc5soetdUyZzJwSbfjdlESJaiC4AhFx4+zopfPwrXdijSZJ844
chXyi01VP10+LQ7fuK2+U8yvPTopxUj5oUZ7nGZK3yOzwXTr6IhrrEHKodIkH0p/
tRZ7fEAIXpROhLXdLXrWkIECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSzoepgej91
/niqhC64kJJZkRD9xjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjVCQ0MvQjExODFCMTBDRTc4MTFFRjgwRUY0RDQ0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY1QkNDL0IxMTgxQjEwQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9f
ZGY1NHFvUXV1SkNTV1pFUV9jWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH4ejANBgkqhkiG9w0BAQsFAAOCAQEAakoVVpo7aS3U+AJqAWmv
UEsMGX4OGivniN5HfRyEge5kZHJthRVKkmKrA8pMh3wsJn4srb70ctUZ4i8R23iR
TNUg+eHc+XMaeH9SEjfU5c/p+Fz5BIwe3akcc0IlY8QiynBEY0inJC2NtoGmxPc9
3hbMgkKC78qzuSWFdBov75riY7nUZc04lMmpptiBBFGeqZotaQczhesrlYm7f/wz
PElYcY6HqM+xCXof4q//OHNdheJi9A/ul+QAvyNpBCxJwfiHRkE1kCxmFjcnuwu9
udmYoiWvFJ1ZhAXAtEPYQQX8ouS7ySBgHLzrarprBCkKFXzGO3C5KyhsQwv/FYcI
zA==
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:43:21 2026 by rpki-client