Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer (raw, json)
Hash identifier: IvwORJdep26OpNnHFTJGf4bKxmzAlW1yYVkDCmdO99w=
Subject key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D30
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Jun 2026 13:14:07 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32048 (0x7d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 17 13:14:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0d:ca:0c:25:5b:0b:50:58:8c:c4:87:56:27:
98:72:e4:79:ac:2b:8e:6c:cd:a4:50:ec:eb:f8:c5:
bb:0d:17:99:c7:1e:75:09:de:19:a6:a5:5e:22:96:
f3:c9:6b:44:cd:8a:ad:bf:42:fc:6f:4d:b5:9c:49:
24:87:95:76:af:8f:86:81:b0:c6:ed:96:48:64:92:
54:43:26:84:5e:22:2e:90:90:57:b4:6a:20:96:b9:
93:9d:29:a0:ec:12:56:42:21:0b:78:90:9e:bc:e2:
59:20:e0:1c:44:ad:89:72:29:26:65:e9:be:2e:39:
e0:91:0a:ae:1c:52:46:4f:c4:c1:97:0e:44:74:a6:
b5:26:ca:10:db:6c:c0:3d:d2:48:9d:40:28:86:fe:
0a:b4:2d:68:51:7e:a9:db:dc:78:9d:6c:56:91:5b:
e6:5b:28:ee:5f:fc:3f:44:c9:e0:98:a4:1e:a7:76:
cb:d1:93:1d:72:32:00:09:f0:ae:6b:1d:9f:80:29:
60:c1:be:18:ed:30:69:cb:99:8e:93:f0:e0:af:da:
da:84:80:e1:25:09:13:7d:8a:21:49:48:d0:5f:e7:
1d:13:2f:8e:cd:5a:6e:af:91:7b:4e:28:d7:61:0a:
69:1a:ac:90:25:e1:08:14:03:44:4e:09:e7:ee:ce:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.148.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:20:0e:8b:96:62:73:2e:66:22:08:a8:3f:ad:16:8c:be:41:
82:e4:d8:b7:b7:59:a0:55:23:43:e5:4a:42:d4:8d:26:19:e7:
1b:a4:e7:53:6c:0e:34:2e:56:b9:16:54:f4:96:cd:e4:6d:0a:
59:38:4f:68:14:91:0b:af:e9:89:78:56:7a:94:90:29:e2:19:
32:49:a7:56:b0:db:32:39:b6:c2:7a:c4:cd:58:d9:eb:79:c5:
5d:7b:e8:bf:38:3d:fb:99:aa:b9:89:8f:74:81:b9:26:4c:96:
fd:e3:b1:4d:3c:21:6a:ad:c0:53:3d:9d:f1:55:42:ad:da:e0:
35:30:46:c7:9c:e7:32:2c:c4:c9:68:f5:e5:2b:d5:f2:40:f6:
f1:3f:2b:eb:0d:0f:32:ab:58:bd:d3:3e:4b:51:de:f5:6b:3b:
d5:0d:ec:b8:d9:e5:ed:cd:66:c7:ff:1b:a8:a9:6d:0c:99:dc:
59:80:15:e4:a6:23:ce:ca:4f:de:ae:8c:24:52:57:50:7f:7c:
07:59:24:4b:f2:8c:ff:a8:a4:ec:13:31:63:4c:a9:56:a4:cb:
d8:68:1a:56:89:50:e5:94:36:c9:42:eb:90:4f:9a:d8:04:0e:
38:96:27:d9:77:53:90:41:ab:9a:a6:26:32:90:fb:b3:1f:45:
a1:99:d7:14
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjE3MTMxNDA3WhcNMjcwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVE
RTRFQjI2NDRCRUVEMjg3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APsNygwlWwtQWIzEh1YnmHLkeawrjmzNpFDs6/jFuw0XmccedQneGaalXiKW88lr
RM2Krb9C/G9NtZxJJIeVdq+PhoGwxu2WSGSSVEMmhF4iLpCQV7RqIJa5k50poOwS
VkIhC3iQnrziWSDgHEStiXIpJmXpvi454JEKrhxSRk/EwZcORHSmtSbKENtswD3S
SJ1AKIb+CrQtaFF+qdvceJ1sVpFb5lso7l/8P0TJ4JikHqd2y9GTHXIyAAnwrmsd
n4ApYMG+GO0wacuZjpPw4K/a2oSA4SUJE32KIUlI0F/nHRMvjs1abq+Re04o12EK
aRqskCXhCBQDRE4J5+7OkX0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTEJtQmQAZ2
VVlz3+3k6yZEvu0oczAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE4NTcvQzFGNzMwNzIzQzk4MTFGMEFGMTI0QjM4QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYxODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FH
ZGxWWmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVjlDANBgkqhkiG9w0BAQsFAAOCAQEAmiAOi5Zicy5mIgioP60W
jL5BguTYt7dZoFUjQ+VKQtSNJhnnG6TnU2wONC5WuRZU9JbN5G0KWThPaBSRC6/p
iXhWepSQKeIZMkmnVrDbMjm2wnrEzVjZ63nFXXvovzg9+5mquYmPdIG5JkyW/eOx
TTwhaq3AUz2d8VVCrdrgNTBGx5znMizEyWj15SvV8kD28T8r6w0PMqtYvdM+S1He
9Ws71Q3suNnl7c1mx/8bqKltDJncWYAV5KYjzspP3q6MJFJXUH98B1kkS/KM/6ik
7BMxY0ypVqTL2GgaVolQ5ZQ2yULrkE+a2AQOOJYn2XdTkEGrmqYmMpD7sx9FoZnX
FA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:16 2026 by rpki-client