Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
File: EbEncUrFQIyE8NdlOMlegnXa2Fo.cer (raw, json)
Hash identifier: u+yoWpFOgCg8uu8Q1nuY+6Ci7NdSnl99O2CufclUKZA=
Subject key identifier: 11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 825E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 22:32:13 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.222.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33374 (0x825e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 16 22:32:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91B4E1D, serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:a6:5a:2f:9b:e5:57:cb:5b:32:93:ab:5f:
f4:34:57:87:66:54:01:b9:86:71:b5:ab:98:b5:b9:
52:76:09:56:65:29:0b:eb:c8:bd:97:fb:bc:88:38:
d6:4e:13:f3:6e:ab:d6:23:25:27:4b:f0:b7:43:67:
24:8f:a0:b0:0c:b9:86:86:cd:09:ec:20:fd:08:a4:
37:ab:ae:5d:1f:d2:6b:2c:ab:68:3c:95:af:31:d5:
4c:03:1f:a8:44:b9:bc:0e:b1:0e:e8:6f:25:c2:1e:
f7:bc:86:6f:39:2b:97:e2:f9:5c:c5:2c:f4:73:6d:
eb:d1:e3:a1:fb:2c:e6:9a:0e:59:73:74:a7:b3:db:
34:32:14:22:5e:6d:c4:df:9b:a9:2c:35:2c:74:96:
6e:c8:bd:b1:e3:94:22:75:cc:28:39:6f:21:41:68:
f3:ba:d8:e5:37:cf:3e:94:aa:78:30:41:44:95:84:
ad:32:49:8c:fb:e7:a0:18:9d:66:e0:4f:fc:e6:3b:
db:87:43:a5:1c:75:b5:a3:05:b5:ed:1c:82:b0:df:
95:4b:7a:90:e4:e0:4e:25:80:db:94:44:ae:26:93:
06:bb:79:e6:9f:5a:f3:43:23:bf:6a:57:3e:52:29:
a8:59:49:fc:85:ff:04:8e:d0:a6:e7:1a:e0:3c:ea:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.222.0/23
Signature Algorithm: sha256WithRSAEncryption
99:0a:2c:47:a7:5e:e7:12:4d:ad:41:e9:5f:fc:2d:9f:21:60:
49:85:fb:c1:f0:5a:4d:8b:8b:eb:d0:ca:80:d7:b4:f0:34:f8:
4c:5c:3a:43:cf:48:97:e1:e9:57:f6:93:1f:bb:e8:d4:9d:9d:
6f:44:89:ba:75:3d:5e:93:9c:d2:d7:09:c3:2c:2f:39:1f:47:
23:f3:12:f2:b1:0e:61:37:e3:86:95:28:19:b1:a3:ef:1e:21:
4f:f9:42:2f:5c:25:0e:62:1f:6b:65:13:ba:69:8f:3e:99:50:
85:b5:31:eb:46:ed:d4:f0:36:0e:47:ec:0e:e1:c9:8d:25:e4:
e8:56:6a:a7:ee:a0:a6:e5:4f:76:33:37:b0:de:f9:92:5f:ee:
04:3a:d8:18:85:ae:17:91:5d:3b:9b:e6:52:5e:5c:d9:b5:dc:
b7:a9:2f:00:8b:e7:7d:9f:65:0d:ec:0a:82:3c:39:c0:61:88:
7a:a4:db:1d:70:fc:e3:12:a0:30:3d:58:bb:20:ec:d1:97:a7:
8b:86:4f:36:95:a1:41:93:85:f6:91:95:b9:1f:aa:0b:1c:ea:
61:a9:5e:aa:1c:92:2c:38:be:b0:8b:1b:14:eb:a7:15:dd:ca:
54:5c:eb:71:50:f6:fa:74:1e:80:c0:88:0c:1c:06:7e:f0:6c:
0e:2a:cc:fa
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIJeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkxNjIyMzIxM1oXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjRFMUQxMTAvBgNVBAUTKDExQjEyNzcxNEFDNTQwOEM4NEYwRDc2
NTM4Qzk1RTgyNzVEQUQ4NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaVqZaL5vlV8tbMpOrX/Q0V4dmVAG5hnG1q5i1uVJ2CVZlKQvryL2X+7yIONZO
E/Nuq9YjJSdL8LdDZySPoLAMuYaGzQnsIP0IpDerrl0f0mssq2g8la8x1UwDH6hE
ubwOsQ7obyXCHve8hm85K5fi+VzFLPRzbevR46H7LOaaDllzdKez2zQyFCJebcTf
m6ksNSx0lm7IvbHjlCJ1zCg5byFBaPO62OU3zz6UqngwQUSVhK0ySYz756AYnWbg
T/zmO9uHQ6UcdbWjBbXtHIKw35VLepDk4E4lgNuURK4mkwa7eeafWvNDI79qVz5S
KahZSfyF/wSO0KbnGuA86k6rAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUEbEncUrF
QIyE8NdlOMlegnXa2FowHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI0RTFELzczQjkxRkNDQjIxRTExRjE4N0E2RjZFRjU4MTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCNEUxRC83M0I5MUZDQ0IyMUUxMUYxODdBNkY2RUY1ODExRjk3MC9FYkVuY1Vy
RlFJeUU4TmRsT01sZWduWGEyRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGg7N4wDQYJKoZIhvcNAQELBQADggEBAJkKLEenXucSTa1B6V/8
LZ8hYEmF+8HwWk2Li+vQyoDXtPA0+ExcOkPPSJfh6Vf2kx+76NSdnW9Eibp1PV6T
nNLXCcMsLzkfRyPzEvKxDmE344aVKBmxo+8eIU/5Qi9cJQ5iH2tlE7ppjz6ZUIW1
MetG7dTwNg5H7A7hyY0l5OhWaqfuoKblT3YzN7De+ZJf7gQ62BiFrheRXTub5lJe
XNm13LepLwCL532fZQ3sCoI8OcBhiHqk2x1w/OMSoDA9WLsg7NGXp4uGTzaVoUGT
hfaRlbkfqgsc6mGpXqockiw4vrCLGxTrpxXdylRc63FQ9vp0HoDAiAwcBn7wbA4q
zPo=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:30 2026 by rpki-client