Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
File: BstI9X1UOpeC2KfJbaTh3tvDwws.cer (raw, json)
Hash identifier: cTRmRb+OvLwwwMreQVHQWIEWJ3gtCNFMKv3IsKAKrJs=
Subject key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7CEE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Jun 2026 14:35:45 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.184.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 10:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31982 (0x7cee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 12 14:35:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:16:aa:07:c5:04:b0:cd:4c:05:c9:21:26:
be:23:06:08:ca:61:2a:1a:90:70:25:e8:e0:85:13:
2f:6d:22:70:11:d2:3f:9c:20:54:90:4d:b4:c9:9e:
2d:40:c7:c5:4e:e1:c7:ec:ed:f0:9d:b7:27:f2:d6:
6e:81:f4:fb:3e:a8:49:11:f5:16:ae:09:20:6d:69:
04:e9:21:4c:cb:3a:67:a7:6d:ec:7d:2c:28:c3:5a:
78:ed:b7:f2:9e:71:ca:1e:e1:cc:ce:f0:b2:4e:66:
d1:7f:01:a5:d7:77:78:ae:e9:b2:a3:34:95:36:44:
18:3d:71:85:4e:47:b5:26:14:65:d6:b5:1b:09:9b:
d9:be:74:5c:1e:4e:0b:5b:fc:2d:fe:2d:18:15:1d:
d0:ec:7b:60:b0:1b:6a:a3:5f:7d:54:08:e2:cd:3d:
ef:d9:38:20:1f:38:42:06:45:ab:8c:da:c1:64:95:
5c:8e:c2:b1:25:f6:51:9f:16:34:27:bc:ec:ca:55:
72:1b:0a:2a:e7:fb:7f:c2:e6:73:ce:b5:44:99:f1:
67:c3:d7:07:12:b8:39:77:c7:84:fc:c6:d9:7d:2d:
42:0b:66:a4:fd:70:a5:7a:f0:1a:9b:01:41:96:1e:
9a:f7:df:38:51:25:c4:e7:ff:6b:32:68:64:50:3e:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.184.0/23
Signature Algorithm: sha256WithRSAEncryption
82:ce:d8:cb:26:c5:89:03:0c:27:98:e4:ff:59:e9:e0:7a:b6:
dc:0e:fc:11:39:bb:3e:13:e5:78:43:cc:fb:02:21:11:cb:56:
e4:78:49:2c:9a:0b:62:70:ad:b9:5b:f6:41:65:61:cf:09:94:
35:b2:b0:5c:5b:ed:31:c8:b8:23:93:d1:5d:04:a1:fd:cb:58:
c7:2a:e2:dd:d5:b2:d5:17:1e:8e:02:24:0b:d1:5a:3e:62:10:
dd:e5:5f:45:5e:46:5e:55:e5:5f:5e:3c:e4:03:b7:1f:78:9d:
c6:56:e0:e8:7f:9f:48:05:9a:3b:a3:3b:9f:85:02:32:15:7b:
eb:75:2c:26:b2:1f:ca:6e:86:35:e0:8c:7f:50:7a:c1:9a:43:
d5:d9:c0:cb:8a:12:53:7c:e0:c2:f5:77:71:2a:bc:6b:5b:e1:
02:ab:9f:58:9c:8f:97:ba:8f:40:84:a0:81:21:37:33:01:5a:
da:98:2e:8a:4c:54:9b:84:48:6f:e9:49:db:c0:7b:0d:90:ca:
5b:e3:0b:d7:b6:b4:c3:ae:af:9d:e9:6b:63:fe:25:36:f6:70:
a8:f0:e3:a0:4b:87:e7:00:ce:5b:be:41:0e:3e:a1:85:91:92:
97:b1:17:18:ed:4d:c8:cf:81:44:d5:88:fe:c1:b3:52:ae:e8:
b4:1a:08:c8
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjEyMTQzNTQ1WhcNMjcwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFMkVGRjExMC8GA1UEBRMoMDZDQjQ4RjU3RDU0M0E5NzgyRDhBN0M5
NkRBNEUxREVEQkMzQzMwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AN2ZFqoHxQSwzUwFySEmviMGCMphKhqQcCXo4IUTL20icBHSP5wgVJBNtMmeLUDH
xU7hx+zt8J23J/LWboH0+z6oSRH1Fq4JIG1pBOkhTMs6Z6dt7H0sKMNaeO238p5x
yh7hzM7wsk5m0X8Bpdd3eK7psqM0lTZEGD1xhU5HtSYUZda1Gwmb2b50XB5OC1v8
Lf4tGBUd0Ox7YLAbaqNffVQI4s0979k4IB84QgZFq4zawWSVXI7CsSX2UZ8WNCe8
7MpVchsKKuf7f8Lmc861RJnxZ8PXBxK4OXfHhPzG2X0tQgtmpP1wpXrwGpsBQZYe
mvffOFElxOf/azJoZFA+xpECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQGy0j1fVQ6
l4LYp8ltpOHe28PDCzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTJFRkYvQTMxNDg0N0M0ODQ5MTFGMEJGMDcwMzcwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUyRUZGL0EzMTQ4NDdDNDg0OTExRjBCRjA3MDM3MEM0RjlBRTAyL0JzdEk5WDFV
T3BlQzJLZkpiYVRoM3R2RHd3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVjuDANBgkqhkiG9w0BAQsFAAOCAQEAgs7YyybFiQMMJ5jk/1np
4Hq23A78ETm7PhPleEPM+wIhEctW5HhJLJoLYnCtuVv2QWVhzwmUNbKwXFvtMci4
I5PRXQSh/ctYxyri3dWy1RcejgIkC9FaPmIQ3eVfRV5GXlXlX1485AO3H3idxlbg
6H+fSAWaO6M7n4UCMhV763UsJrIfym6GNeCMf1B6wZpD1dnAy4oSU3zgwvV3cSq8
a1vhAqufWJyPl7qPQISggSE3MwFa2pguikxUm4RIb+lJ28B7DZDKW+ML17a0w66v
nelrY/4lNvZwqPDjoEuH5wDOW75BDj6hhZGSl7EXGO1NyM+BRNWI/sGzUq7otBoI
yA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:22 2026 by rpki-client