Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
File: A9h0_y9dMgjn62Jadzf81EzuKsI.cer (raw, json)
Hash identifier: UWqF18HcKR0i+EMrVpGJ48Wni/TrDDF6IU9aBBPHc5E=
Subject key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8031
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Aug 2026 15:08:05 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32817 (0x8031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 4 15:08:05 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:6c:1d:bf:18:d8:ef:f0:6c:4b:bb:fa:c2:
99:ae:82:53:52:8c:1b:b3:e6:a9:da:28:e3:db:80:
be:1b:c8:17:6b:85:75:ff:2e:4b:4c:18:3e:18:40:
85:4a:46:94:69:52:c3:fa:ba:2c:83:06:6c:c7:93:
0f:65:6a:6b:82:73:34:be:5b:2b:83:54:f3:cb:1d:
27:13:db:25:86:9f:a9:e1:84:59:d5:b3:5d:8b:83:
67:a7:f0:da:ba:71:71:44:f0:92:c1:b4:67:a3:53:
fb:42:8d:c5:94:c1:01:73:dc:c0:9f:4a:15:3f:21:
c9:a9:59:40:c5:e2:1a:f1:61:7d:ae:97:07:9f:1a:
15:df:72:d9:25:5e:61:b9:7a:60:de:95:1a:9a:0f:
ff:dd:80:28:2c:df:fd:68:c7:3c:03:08:2b:f3:9d:
d7:b9:c5:e2:9d:94:0e:ed:3f:b2:29:9a:2f:9f:5a:
e0:b3:ee:13:48:d9:81:42:75:aa:59:0e:2c:fe:1a:
18:cd:89:dc:fc:1c:8c:6c:c5:7a:1f:91:c6:c9:cc:
57:fc:0a:66:57:97:ea:7b:27:00:e9:70:29:f8:00:
e8:a8:04:d4:2b:19:3f:a1:88:02:06:c3:a0:e2:86:
1c:d9:da:8e:97:d1:a0:b1:a5:0b:7f:aa:65:4f:0c:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.76.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:8a:70:cf:e4:30:a3:aa:1a:da:f3:9b:3f:b2:45:96:c2:d6:
68:1c:f2:75:70:5b:ec:97:64:1d:61:25:d1:74:31:69:3b:83:
b6:85:58:75:53:fa:68:1a:f3:11:29:ac:34:1f:2a:f1:55:2c:
47:cd:8b:63:15:cf:ae:fc:17:44:92:f5:58:f6:1c:9f:aa:d7:
b2:45:e3:dc:30:ab:49:fc:17:81:b5:78:1b:60:ea:1a:15:f3:
69:63:a2:5d:53:80:9b:c1:11:bb:65:4d:6d:60:cc:5a:4a:14:
d5:b1:91:19:96:53:6d:e3:b3:aa:89:f3:f8:75:6e:3c:02:7a:
87:14:d1:0f:1f:d9:48:95:e6:4a:ca:0f:62:4a:54:b3:92:85:
ec:82:9b:1d:8a:ad:20:18:05:51:e5:df:e5:b8:7c:38:1b:1f:
0e:6a:75:97:dd:16:de:3b:73:63:03:ed:59:ee:f8:5c:a5:8b:
a0:7b:af:d0:87:ef:10:c0:84:95:ac:75:e8:a6:7a:26:7c:0f:
64:58:98:a7:87:21:43:bb:dc:24:76:b3:89:d8:7c:b6:32:16:
fc:3e:5b:fc:62:13:5b:02:90:01:53:04:e3:d8:7f:9d:10:dc:
7a:7b:8f:ce:03:88:67:3e:8f:f3:bf:92:3a:1d:84:11:a2:d0:
00:39:69:9c
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIAxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgwNDE1MDgwNVoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDkwMUUxMTAvBgNVBAUTKDAzRDg3NEZGMkY1RDMyMDhFN0VCNjI1
QTc3MzdGQ0Q0NENFRTJBQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCreGwdvxjY7/BsS7v6wpmuglNSjBuz5qnaKOPbgL4byBdrhXX/LktMGD4YQIVK
RpRpUsP6uiyDBmzHkw9lamuCczS+WyuDVPPLHScT2yWGn6nhhFnVs12Lg2en8Nq6
cXFE8JLBtGejU/tCjcWUwQFz3MCfShU/IcmpWUDF4hrxYX2ulwefGhXfctklXmG5
emDelRqaD//dgCgs3/1oxzwDCCvznde5xeKdlA7tP7Ipmi+fWuCz7hNI2YFCdapZ
Diz+GhjNidz8HIxsxXofkcbJzFf8CmZXl+p7JwDpcCn4AOioBNQrGT+hiAIGw6Di
hhzZ2o6X0aCxpQt/qmVPDL25AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUA9h0/y9d
Mgjn62Jadzf81EzuKsIwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ5MDFFL0RFMkQ2NEVBNzhEQTExRjBCMEZCRTIxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEOTAxRS9ERTJENjRFQTc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9BOWgwX3k5
ZE1nam42MkphZHpmODFFenVLc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGlZUwwDQYJKoZIhvcNAQELBQADggEBAGqKcM/kMKOqGtrzmz+y
RZbC1mgc8nVwW+yXZB1hJdF0MWk7g7aFWHVT+mga8xEprDQfKvFVLEfNi2MVz678
F0SS9Vj2HJ+q17JF49wwq0n8F4G1eBtg6hoV82ljol1TgJvBEbtlTW1gzFpKFNWx
kRmWU23js6qJ8/h1bjwCeocU0Q8f2UiV5krKD2JKVLOSheyCmx2KrSAYBVHl3+W4
fDgbHw5qdZfdFt47c2MD7Vnu+Fyli6B7r9CH7xDAhJWsdeimeiZ8D2RYmKeHIUO7
3CR2s4nYfLYyFvw+W/xiE1sCkAFTBOPYf50Q3Hp7j84DiGc+j/O/kjodhBGi0AA5
aZw=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:08:59 2026 by rpki-client