Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
File: usH6Gx5O5DACOyddInpdBDx_lqM.cer (raw, json)
Hash identifier: nnYv0v/lMB+ZI9JnyToOfv0vJoV9WpuFwzDjpMmke5s=
Subject key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D2C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Jun 2026 07:07:29 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.248.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32044 (0x7d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 17 07:07:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:20:45:4e:5e:a7:2a:2c:70:56:ba:e7:9b:
87:5b:aa:b4:cc:42:74:23:13:04:76:96:53:2b:09:
40:06:c5:8f:dc:65:19:3d:5a:91:c0:c1:65:d7:65:
93:16:a0:33:ba:ac:b3:df:df:02:35:3a:95:09:66:
e0:bc:74:60:a2:2d:cf:47:ff:e7:67:eb:e9:f6:7f:
8f:35:57:8d:dd:c5:ea:11:0f:56:72:68:7c:7d:1b:
f5:d0:42:65:cf:a4:9c:3b:e0:0a:16:6a:2a:f0:c1:
46:07:87:c3:fb:fe:70:37:b1:f2:dc:9c:55:c4:0c:
c6:3e:dc:7e:05:6f:47:8c:bc:0d:a1:30:37:64:7e:
63:80:92:a3:3e:23:06:ad:04:02:bf:64:9c:98:90:
f6:98:32:cd:a8:bf:61:40:ee:d3:7a:52:e6:40:cf:
43:53:b5:65:f8:89:f8:d0:a2:1c:82:53:3b:f2:0a:
fa:75:0b:a4:1e:f4:e4:1e:fe:b1:07:79:03:40:a5:
64:41:cc:e8:c9:48:af:1c:c7:7e:4e:74:e2:3f:70:
c4:94:ff:ef:2e:aa:a8:d3:8b:58:77:89:8b:55:e9:
16:19:68:5d:ef:6b:1c:1d:f5:24:0c:1c:ad:78:42:
b6:9c:21:76:b4:5d:0e:29:83:97:ad:9f:a4:8c:57:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:25:6b:69:f4:fa:5a:28:2b:24:b7:fd:f9:eb:58:a6:01:e3:
cf:f5:f8:2e:f2:de:18:9d:ce:99:cd:9c:c5:31:3b:b0:8d:8c:
c6:a3:5d:ad:e4:53:09:7f:09:90:c5:e3:12:68:e2:aa:ad:59:
96:e0:3d:8c:fa:d1:02:23:d6:9f:2b:9c:53:ce:b5:97:d0:18:
15:a4:f7:33:b9:00:82:53:bb:24:23:f0:2c:a5:46:fb:d3:ac:
a9:e4:ad:b3:f9:b2:65:49:78:a6:57:7d:db:7e:5b:d6:a8:e9:
ae:9e:d0:02:11:2b:b4:d0:b6:09:a9:5c:47:30:d0:79:33:e1:
a8:c2:65:c8:7e:bb:c0:e4:c0:ec:61:ef:a2:c9:03:50:5f:be:
94:32:41:26:53:3f:b6:64:d3:29:e2:c4:4a:2c:f1:20:fd:cc:
bf:34:f5:b5:7e:e3:83:75:ed:4d:02:1c:15:d3:30:df:b4:66:
ec:33:c7:4d:a1:62:fc:5e:29:30:37:3d:b7:28:c2:85:ee:53:
50:a6:49:d1:df:07:7f:f9:ee:80:3c:64:e7:d6:5a:0c:68:9b:
be:99:10:2b:89:28:20:d9:74:35:7f:c0:70:9e:1c:9c:b2:72:
31:ca:11:2f:da:d6:eb:42:2d:6c:b8:ca:c8:08:4e:16:96:9a:
f7:b5:99:9b
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjE3MDcwNzI5WhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzRkU1NTExMC8GA1UEBRMoQkFDMUZBMUIxRTRFRTQzMDAyM0IyNzVE
MjI3QTVEMDQzQzdGOTZBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANEeIEVOXqcqLHBWuuebh1uqtMxCdCMTBHaWUysJQAbFj9xlGT1akcDBZddlkxag
M7qss9/fAjU6lQlm4Lx0YKItz0f/52fr6fZ/jzVXjd3F6hEPVnJofH0b9dBCZc+k
nDvgChZqKvDBRgeHw/v+cDex8tycVcQMxj7cfgVvR4y8DaEwN2R+Y4CSoz4jBq0E
Ar9knJiQ9pgyzai/YUDu03pS5kDPQ1O1ZfiJ+NCiHIJTO/IK+nULpB705B7+sQd5
A0ClZEHM6MlIrxzHfk504j9wxJT/7y6qqNOLWHeJi1XpFhloXe9rHB31JAwcrXhC
tpwhdrRdDimDl62fpIxXaOcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS6wfobHk7k
MAI7J10iel0EPH+WozAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0ZFNTUvMjRDQUU0QTg0NzNCMTFGMDgzMzZGNzVDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNGRTU1LzI0Q0FFNEE4NDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL3VzSDZHeDVP
NURBQ095ZGRJbnBkQkR4X2xxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKVj+DANBgkqhkiG9w0BAQsFAAOCAQEAoyVrafT6WigrJLf9+etY
pgHjz/X4LvLeGJ3Omc2cxTE7sI2MxqNdreRTCX8JkMXjEmjiqq1ZluA9jPrRAiPW
nyucU861l9AYFaT3M7kAglO7JCPwLKVG+9OsqeSts/myZUl4pld9235b1qjprp7Q
AhErtNC2CalcRzDQeTPhqMJlyH67wOTA7GHvoskDUF++lDJBJlM/tmTTKeLESizx
IP3MvzT1tX7jg3XtTQIcFdMw37Rm7DPHTaFi/F4pMDc9tyjChe5TUKZJ0d8Hf/nu
gDxk59ZaDGibvpkQK4koINl0NX/AcJ4cnLJyMcoRL9rW60ItbLjKyAhOFpaa97WZ
mw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:10 2026 by rpki-client