Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
File: zuSHZKosFvdaBnJE66WGaXThztY.cer (raw, json)
Hash identifier: jl6DQSYKmyyZk37Sxd23N5FtPw0DaYM81LW7duvdh6g=
Subject key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 840E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Oct 2026 12:59:16 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.236.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33806 (0x840e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 28 12:59:16 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:9d:18:6b:a4:d0:ab:ad:f8:c0:69:58:29:
4c:32:b8:75:6f:75:5e:6b:7f:93:e3:d7:0e:b7:45:
f2:1f:48:8c:3c:fc:ce:4a:94:d3:64:13:28:2d:d9:
7d:a8:07:ac:ef:4f:47:cb:9d:76:ff:00:d5:36:ce:
81:fc:cc:d4:57:9e:9b:e4:0b:18:e9:a4:37:c2:df:
82:aa:41:58:83:18:9b:01:5c:a8:e1:21:98:52:5e:
6c:02:1f:31:47:bc:dd:2e:09:ff:0b:a8:94:d3:45:
ac:da:5b:26:c1:77:f8:d5:80:42:1a:7c:4f:5e:53:
d5:29:02:95:10:79:05:40:08:ce:e9:5a:64:4d:cb:
29:f4:9d:5e:a8:89:d8:61:09:87:82:7b:94:ce:9d:
c0:72:61:97:53:0f:38:fc:81:f1:96:2b:ed:7c:b0:
b4:8a:de:90:b6:d6:6e:d4:33:4e:4d:e3:9b:61:a6:
0c:2d:c1:57:b1:14:3b:9e:a7:f6:f0:79:72:20:67:
75:eb:16:c9:9b:85:81:60:50:00:e9:2a:ab:7e:73:
32:93:ce:3f:7a:17:a1:8c:f0:07:2c:cc:db:3f:31:
43:05:20:55:b2:c8:e3:88:7d:7e:69:36:72:d0:d7:
f0:59:d8:a9:45:ec:32:13:b4:f7:b0:59:a2:69:18:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.236.0/23
Signature Algorithm: sha256WithRSAEncryption
08:81:51:87:31:52:d2:a0:ad:96:a7:6c:b6:7e:73:97:4b:8f:
da:64:61:ba:44:9f:13:8c:09:7f:8c:78:6d:a2:fb:39:c0:53:
3f:66:32:81:9f:0b:10:5d:2e:1f:21:39:10:f9:26:58:32:14:
60:8b:ee:25:15:75:a4:51:82:34:f6:1b:ea:e7:3c:5d:05:df:
a2:13:c8:2e:37:38:c8:54:96:e5:05:d1:ee:41:95:25:0e:30:
d0:ca:fe:a1:ac:32:33:88:26:10:6e:fe:53:36:3e:5f:15:20:
f2:a4:3d:2e:80:cd:8f:1d:10:a1:89:d1:11:6e:52:d9:d8:95:
52:c4:6c:d0:f8:f0:57:9b:78:f4:04:6d:49:7c:96:d2:ff:de:
f8:29:68:df:a1:5a:81:48:1d:c9:54:0c:14:ba:51:85:44:ec:
48:f0:a1:84:b2:60:b7:dd:61:05:62:45:69:d3:d0:eb:31:8d:
78:ce:2a:ba:2c:9b:1b:14:7e:05:f4:bf:68:0e:86:cb:6b:47:
30:0e:f1:d3:bf:b2:34:7c:69:93:b5:b9:06:e6:d3:c9:35:d9:
9d:02:10:8f:33:d4:98:b9:54:58:74:30:2a:8c:e9:bb:79:1f:
a1:bf:88:75:06:7c:81:fc:4b:f5:85:9d:8b:c6:0d:99:ba:1a:
8d:7f:0c:64
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIQOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAyODEyNTkxNloXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0
NEVCQTU4NjY5NzRFMUNFRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZZJ0Ya6TQq634wGlYKUwyuHVvdV5rf5Pj1w63RfIfSIw8/M5KlNNkEygt2X2o
B6zvT0fLnXb/ANU2zoH8zNRXnpvkCxjppDfC34KqQViDGJsBXKjhIZhSXmwCHzFH
vN0uCf8LqJTTRazaWybBd/jVgEIafE9eU9UpApUQeQVACM7pWmRNyyn0nV6oidhh
CYeCe5TOncByYZdTDzj8gfGWK+18sLSK3pC21m7UM05N45thpgwtwVexFDuep/bw
eXIgZ3XrFsmbhYFgUADpKqt+czKTzj96F6GM8AcszNs/MUMFIFWyyOOIfX5pNnLQ
1/BZ2KlF7DITtPewWaJpGMebAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUzuSHZKos
FvdaBnJE66WGaXThztYwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVBNEFGLzQ2NjQ2NkNBNjlGNjExRUZCMkI4QUY1MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktv
c0Z2ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGgHuwwDQYJKoZIhvcNAQELBQADggEBAAiBUYcxUtKgrZanbLZ+
c5dLj9pkYbpEnxOMCX+MeG2i+znAUz9mMoGfCxBdLh8hORD5JlgyFGCL7iUVdaRR
gjT2G+rnPF0F36ITyC43OMhUluUF0e5BlSUOMNDK/qGsMjOIJhBu/lM2Pl8VIPKk
PS6AzY8dEKGJ0RFuUtnYlVLEbND48FebePQEbUl8ltL/3vgpaN+hWoFIHclUDBS6
UYVE7EjwoYSyYLfdYQViRWnT0OsxjXjOKrosmxsUfgX0v2gOhstrRzAO8dO/sjR8
aZO1uQbm08k12Z0CEI8z1Ji5VFh0MCqM6bt5H6G/iHUGfIH8S/WFnYvGDZm6Go1/
DGQ=
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:46 2026 by rpki-client