Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
File: w-IA1ABdmiPkv66uDtty6kPx0JY.cer (raw, json)
Hash identifier: 7YOhlS4+ykqbFyVAlcA1HG2VsOgSfL++8d+fc/9dQbs=
Subject key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 03:54:47 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.225.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33528 (0x82f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 03:54:47 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:cf:b9:a9:c7:7a:2e:29:d2:f4:50:0c:32:
9e:db:34:cd:f4:07:23:83:97:0a:6e:f8:0b:e4:71:
46:04:05:bb:ce:8c:9d:07:27:85:47:02:5c:14:f4:
6c:cc:e4:a6:36:b5:3c:70:04:a0:2f:61:ef:aa:5c:
70:a5:3c:0a:63:50:12:2a:24:61:0d:43:7e:c9:14:
89:44:7e:f4:06:8d:6d:0f:a5:86:80:87:37:9a:69:
77:09:f1:8f:06:6d:1f:58:a8:f0:32:a9:26:a5:52:
f6:ed:89:48:61:67:ae:aa:d6:c4:40:ab:cf:fb:85:
64:92:50:29:48:cd:de:15:27:01:59:78:ff:1d:dc:
62:ce:1f:d2:be:9c:a0:b0:0d:29:f4:79:13:ca:66:
63:ff:8b:13:63:76:44:a0:6a:6d:2f:88:c4:ff:23:
1d:02:81:8b:a2:c2:67:3a:c7:6e:40:49:80:6e:6b:
ab:0a:93:c7:21:ad:33:16:48:33:e8:7d:33:b2:c4:
f0:c8:94:39:c1:2e:7f:4b:c6:47:cb:5e:9c:13:77:
52:5c:09:2e:a0:50:0d:be:54:bb:8e:1a:d0:6e:d1:
ce:b2:be:b0:72:cb:0c:05:cf:47:84:7b:77:f7:93:
0f:90:41:0a:9c:7b:28:b5:37:68:ac:d7:5a:6b:d0:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:00:98:75:df:b6:f2:9c:55:13:97:58:a4:28:31:96:78:d0:
e6:bf:10:20:3f:a2:ea:17:ed:48:67:dd:2b:4c:a2:46:bc:05:
b6:7a:b9:58:77:fe:0b:cd:39:22:24:81:95:0c:64:53:bb:8d:
bb:00:98:4d:8b:18:65:92:fd:b0:c6:8c:58:87:8d:f7:d4:85:
af:11:fb:2c:56:66:db:8f:32:d7:16:fb:3b:23:2c:73:fb:9a:
78:44:ce:2d:f7:e7:b6:d8:75:6b:05:1b:e5:09:d6:28:53:6c:
85:95:5e:24:13:62:e7:92:ae:ff:c4:b3:33:b6:9b:dc:b9:fe:
cd:d1:b5:14:a3:16:cc:fa:7c:99:58:9a:4a:63:a8:41:a4:6f:
e9:b0:e9:66:37:bc:ab:68:c4:6f:2b:46:30:0a:1b:32:b4:61:
1f:fe:6e:28:d5:95:12:ec:ba:65:53:e9:74:92:96:51:97:22:
74:2e:da:93:c3:be:57:64:1e:f4:da:1c:37:b5:44:f9:62:0f:
51:52:9d:b5:03:2b:21:32:13:64:a7:b9:a2:9c:d9:46:df:39:
34:95:e2:8e:e8:5e:98:fb:91:45:49:5b:c3:66:11:91:4a:58:
f2:48:83:58:31:66:5e:13:89:2d:46:56:29:b4:ed:46:c3:51:
74:e8:d0:ad
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIL4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAwMTAzNTQ0N1oXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVB
RTBFREI3MkVBNDNGMUQwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqQ8+5qcd6LinS9FAMMp7bNM30ByODlwpu+AvkcUYEBbvOjJ0HJ4VHAlwU9GzM
5KY2tTxwBKAvYe+qXHClPApjUBIqJGENQ37JFIlEfvQGjW0PpYaAhzeaaXcJ8Y8G
bR9YqPAyqSalUvbtiUhhZ66q1sRAq8/7hWSSUClIzd4VJwFZeP8d3GLOH9K+nKCw
DSn0eRPKZmP/ixNjdkSgam0viMT/Ix0CgYuiwmc6x25ASYBua6sKk8chrTMWSDPo
fTOyxPDIlDnBLn9LxkfLXpwTd1JcCS6gUA2+VLuOGtBu0c6yvrByywwFz0eEe3f3
kw+QQQqceyi1N2is11pr0DTTAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUw+IA1ABd
miPkv66uDtty6kPx0JYwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNEMUEyLzFBMUUzREU0QzlGQTExRUU4M0Y1QjAyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDRDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFC
ZG1pUGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACdD+EwDQYJKoZIhvcNAQELBQADggEBAHoAmHXftvKcVROXWKQo
MZZ40Oa/ECA/ouoX7Uhn3StMoka8BbZ6uVh3/gvNOSIkgZUMZFO7jbsAmE2LGGWS
/bDGjFiHjffUha8R+yxWZtuPMtcW+zsjLHP7mnhEzi3357bYdWsFG+UJ1ihTbIWV
XiQTYueSrv/EszO2m9y5/s3RtRSjFsz6fJlYmkpjqEGkb+mw6WY3vKtoxG8rRjAK
GzK0YR/+bijVlRLsumVT6XSSllGXInQu2pPDvldkHvTaHDe1RPliD1FSnbUDKyEy
E2SnuaKc2UbfOTSV4o7oXpj7kUVJW8NmEZFKWPJIg1gxZl4TiS1GVim07UbDUXTo
0K0=
-----END CERTIFICATE-----
Generated at Sat Oct 10 08:23:00 2026 by rpki-client