Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.cer (raw, json)
Hash identifier: fjYBZlAFjqTTneV0yWBb8DnHZMMtrPw/eU0XcQv9qcI=
Subject key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 808B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Aug 2026 13:55:24 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.145.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32907 (0x808b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 10 13:55:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:a2:d7:80:a1:84:f9:c5:53:54:38:c6:17:
30:21:0b:8c:df:c0:83:1d:f6:39:41:e5:da:da:2c:
11:a8:ae:44:26:01:f4:ac:98:ca:45:cb:5a:9e:d0:
d1:17:58:0e:3d:06:96:94:75:e7:5d:41:4e:14:04:
98:c1:71:15:d5:a0:02:f6:6b:fe:16:73:2c:5c:40:
ee:78:f8:44:35:be:89:75:76:01:ad:22:e1:ef:19:
46:9e:4a:27:29:e7:3d:88:24:43:06:cd:f0:11:01:
4f:26:95:4e:20:a8:34:69:e4:a6:22:ce:0f:db:b0:
dc:12:09:8d:8e:b1:af:a8:e9:ec:ce:5b:91:72:85:
28:a5:5f:52:83:f8:0f:0d:10:a0:44:93:e3:d6:8d:
c5:0f:54:12:cb:3a:9d:11:82:10:bc:ef:12:e9:04:
1c:85:0d:c0:d8:6b:92:6d:0b:69:00:30:30:0b:c6:
9c:93:03:6f:e2:8f:b1:e8:f7:11:ab:5a:ca:27:71:
39:23:73:98:a8:68:00:84:5d:ad:ee:fa:05:dc:9d:
db:6e:b7:7b:e4:bc:0e:2e:3f:3a:a8:88:68:bf:ff:
95:43:5f:9a:f8:4d:78:bf:2f:b5:e4:63:af:3b:5c:
0a:44:0f:ff:da:0e:82:1b:2d:39:d9:ec:7a:a5:69:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e7:a5:99:a6:db:ef:07:f7:e6:43:82:de:a6:08:d2:dc:55:
eb:97:d4:fa:71:61:33:57:21:cf:58:05:18:65:db:cb:77:11:
b5:89:7f:09:5b:55:0e:b5:17:eb:04:c3:e9:ca:97:77:d2:ae:
9e:e2:8e:9e:84:80:63:80:01:fc:84:4d:5e:f1:bc:9e:be:00:
92:48:8d:3d:fd:71:1b:78:92:f9:ea:e1:db:a3:77:c9:2b:07:
ca:33:e1:56:ab:a7:0b:db:94:c0:be:4a:b7:5c:03:28:c3:6e:
40:fb:f8:e5:b3:3d:3d:f4:16:7a:22:43:06:33:4a:63:a5:2e:
c1:88:f6:c1:1d:9d:4e:81:73:79:6b:dc:93:d4:02:9f:b5:bf:
74:c0:82:3e:f6:7a:8c:7c:f8:d1:3b:58:36:97:ba:51:8b:7a:
a1:5a:0c:4b:33:a9:46:ee:f9:2c:eb:00:a1:81:bc:90:24:57:
6d:05:f3:b8:fb:04:d6:fc:c5:ef:c9:54:f3:59:c7:ad:7e:72:
7d:b1:3b:be:5d:1e:44:e1:cb:e9:7e:02:ee:88:9c:f8:58:ae:
b0:15:9a:55:b4:fc:bc:d7:2d:72:db:15:f4:4a:7f:90:1b:40:
41:f0:a0:9a:64:d0:de:4c:b1:3f:f2:47:57:ce:73:13:74:f3:
39:0a:e0:18
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAICLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgxMDEzNTUyNFoXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDBGMEYxMTAvBgNVBAUTKEVCNEM5MUFFQjkwMTk4QUE3RDNDNzgy
MjFEOEUxOEI3MDc1REVGQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc7KLXgKGE+cVTVDjGFzAhC4zfwIMd9jlB5draLBGorkQmAfSsmMpFy1qe0NEX
WA49BpaUdeddQU4UBJjBcRXVoAL2a/4WcyxcQO54+EQ1vol1dgGtIuHvGUaeSicp
5z2IJEMGzfARAU8mlU4gqDRp5KYizg/bsNwSCY2Osa+o6ezOW5FyhSilX1KD+A8N
EKBEk+PWjcUPVBLLOp0RghC87xLpBByFDcDYa5JtC2kAMDALxpyTA2/ij7Ho9xGr
WsoncTkjc5ioaACEXa3u+gXcndtut3vkvA4uPzqoiGi//5VDX5r4TXi/L7XkY687
XApED//aDoIbLTnZ7HqlaYqZAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU60yRrrkB
mKp9PHgiHY4Ytwdd77kwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQwRjBGLzUyREZGQzlFNURFNzExRjBBODY3OTE0RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMEYwRi81MkRGRkM5RTVERTcxMUYwQTg2NzkxNEVDNEY5QUUwMi82MHlScnJr
Qm1LcDlQSGdpSFk0WXR3ZGQ3N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACgFpEwDQYJKoZIhvcNAQELBQADggEBAJ3npZmm2+8H9+ZDgt6m
CNLcVeuX1PpxYTNXIc9YBRhl28t3EbWJfwlbVQ61F+sEw+nKl3fSrp7ijp6EgGOA
AfyETV7xvJ6+AJJIjT39cRt4kvnq4dujd8krB8oz4VarpwvblMC+SrdcAyjDbkD7
+OWzPT30FnoiQwYzSmOlLsGI9sEdnU6Bc3lr3JPUAp+1v3TAgj72eox8+NE7WDaX
ulGLeqFaDEszqUbu+SzrAKGBvJAkV20F87j7BNb8xe/JVPNZx61+cn2xO75dHkTh
y+l+Au6InPhYrrAVmlW0/LzXLXLbFfRKf5AbQEHwoJpk0N5MsT/yR1fOcxN08zkK
4Bg=
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:21:53 2026 by rpki-client