
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
File: usyV7haoNg4u685zU3tvmszfLq0.cer (raw, json)
Hash identifier: qwBuPPBa5mjx1H0DFMgE83qLA7S5hNqmQnaI95T/GcQ=
Subject key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 83B8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Oct 2026 12:50:20 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 138.252.174.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 14:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33720 (0x83b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 19 12:50:20 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:3d:a1:c9:7a:91:d3:63:8c:7f:df:09:d8:
f7:fb:12:c9:03:32:f2:64:c3:6a:68:2e:34:28:7c:
1c:04:6d:cd:24:ec:e4:e4:8e:49:f0:ec:43:2c:fb:
5f:ee:d5:92:29:fd:c1:e5:0a:ea:33:40:87:ba:10:
37:46:26:52:28:89:de:9b:ea:1b:c2:ca:27:42:34:
01:3e:5f:c6:98:bc:28:ae:8c:38:8e:a3:17:21:a9:
eb:39:90:8c:fe:97:ca:72:45:00:45:be:74:20:55:
fe:62:90:c0:fa:7f:0a:ae:49:db:bd:22:86:0c:c5:
f3:f0:56:61:b9:8a:89:e3:ed:bb:a2:e6:96:d5:b6:
ce:07:4f:23:35:da:4f:a6:59:1a:59:b4:04:84:d4:
0d:77:1c:35:a9:dd:e2:37:29:c8:41:c3:b6:29:11:
c2:70:a3:1b:20:99:c2:82:16:da:a6:6b:38:46:c2:
fb:3d:b5:30:8c:b1:b4:35:bd:f0:a2:a5:29:39:b7:
7e:c2:1c:95:14:11:a4:ef:a9:b0:28:78:c4:55:64:
70:c8:8a:46:6c:85:53:42:53:ad:26:3e:bd:98:a6:
37:5e:b5:11:df:48:c7:0b:38:86:02:dc:6a:14:19:
e7:13:84:cc:d1:fc:cc:35:d6:74:46:41:9c:10:48:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:21:34:af:af:54:9a:97:cb:7e:c5:67:aa:95:c2:0d:48:ca:
47:f5:c2:af:e8:ed:96:64:81:94:da:d1:58:e5:fe:e7:da:a5:
f2:d6:11:76:69:cd:8c:55:cc:06:1f:79:c7:c2:a3:1c:ea:1b:
49:67:d5:57:ba:14:dd:36:3a:fb:6f:8a:5a:84:c0:90:aa:7c:
55:ad:47:07:63:ac:98:af:41:c5:15:03:c7:6d:bb:cf:e2:dd:
a7:eb:6b:da:11:10:5e:bd:79:8a:9b:ac:e1:72:2e:ad:37:84:
d9:e7:95:69:45:b1:20:e7:8a:00:0a:dc:a3:b4:d1:09:b7:3e:
5c:78:e6:43:c3:85:22:03:fe:f1:cd:1f:8b:77:b6:8d:6f:85:
93:f9:dd:97:de:73:02:f6:bb:d7:57:b0:10:46:6b:fb:64:79:
ba:41:45:c6:91:c8:1a:d3:d1:b5:7e:ee:3b:6e:f6:e3:5c:4e:
47:88:81:fe:bd:9e:dc:33:5d:39:73:75:8b:2c:0e:01:53:f6:
e4:9d:c1:f7:e7:1d:27:c2:8a:3d:c3:fa:b1:59:f4:44:b0:e4:
f6:08:58:e6:06:68:15:17:ef:d2:e9:09:77:04:33:82:36:a9:
dd:a6:3d:19:ad:80:6b:c4:66:71:1a:54:1f:df:7f:9b:79:11:
af:dc:6d:98
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIO4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAxOTEyNTAyMFoXDTI4MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEQzQjAxMTAvBgNVBAUTKEJBQ0M5NUVFMTZBODM2MEUyRUVCQ0U3
MzUzN0I2RjlBQ0NERjJFQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMZz2hyXqR02OMf98J2Pf7EskDMvJkw2poLjQofBwEbc0k7OTkjknw7EMs+1/u
1ZIp/cHlCuozQIe6EDdGJlIoid6b6hvCyidCNAE+X8aYvCiujDiOoxchqes5kIz+
l8pyRQBFvnQgVf5ikMD6fwquSdu9IoYMxfPwVmG5ionj7bui5pbVts4HTyM12k+m
WRpZtASE1A13HDWp3eI3KchBw7YpEcJwoxsgmcKCFtqmazhGwvs9tTCMsbQ1vfCi
pSk5t37CHJUUEaTvqbAoeMRVZHDIikZshVNCU60mPr2YpjdetRHfSMcLOIYC3GoU
GecThMzR/Mw11nRGQZwQSGEHAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUusyV7hao
Ng4u685zU3tvmszfLq0wHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTREM0IwL0VFRDVCOEYyRTQ4QjExRjA5MkJCQUY2RTQ0NkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0RDNCMC9FRUQ1QjhGMkU0OEIxMUYwOTJCQkFGNkU0NDZGNTZCQy91c3lWN2hh
b05nNHU2ODV6VTN0dm1zemZMcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGK/K4wDQYJKoZIhvcNAQELBQADggEBAGohNK+vVJqXy37FZ6qV
wg1Iykf1wq/o7ZZkgZTa0Vjl/ufapfLWEXZpzYxVzAYfecfCoxzqG0ln1Ve6FN02
OvtvilqEwJCqfFWtRwdjrJivQcUVA8dtu8/i3afra9oREF69eYqbrOFyLq03hNnn
lWlFsSDnigAK3KO00Qm3Plx45kPDhSID/vHNH4t3to1vhZP53ZfecwL2u9dXsBBG
a/tkebpBRcaRyBrT0bV+7jtu9uNcTkeIgf69ntwzXTlzdYssDgFT9uSdwffnHSfC
ij3D+rFZ9ESw5PYIWOYGaBUX79LpCXcEM4I2qd2mPRmtgGvEZnEaVB/ff5t5Ea/c
bZg=
-----END CERTIFICATE-----
Generated at Thu Oct 29 16:01:54 2026 by rpki-client