Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer
File: FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer (raw, json)
Hash identifier: UMWAfji07EqkGJYQIUQk0ejIQVLOiXiT3b8TGUe1UQo=
Subject key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8471
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Nov 2026 14:08:40 +0000
Certificate not after: Mon 01 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33905 (0x8471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 2 14:08:40 2026 GMT
Not After : Mar 1 00:00:00 2027 GMT
Subject: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:a3:e4:bc:09:b5:f7:86:5f:ed:88:b1:35:
02:71:fb:d2:79:84:50:a7:38:fc:cd:9c:b2:a1:09:
c3:38:9f:7f:15:00:8e:5f:3b:2a:54:6e:f6:20:cb:
eb:42:06:a3:5c:67:96:8a:4d:8b:95:99:b7:41:0b:
ca:d2:b5:ac:1f:dc:a7:79:f4:48:16:b1:6a:c4:98:
09:42:fe:64:9f:ca:15:e8:6a:4a:2d:a9:8d:92:7c:
77:82:77:45:95:13:29:46:a8:0e:d9:83:f5:15:a7:
0b:cf:bd:83:86:20:d7:b1:06:f3:a1:01:df:93:33:
09:66:12:c1:dc:14:9f:a6:0d:aa:0a:77:05:31:fc:
d1:2c:aa:d3:f2:d8:7d:0e:f3:b3:ee:a9:35:1a:d6:
26:05:fb:64:f5:7c:52:4a:e3:8a:1a:e3:cf:69:21:
a4:f0:93:40:ef:0c:22:ce:89:6f:5a:96:08:50:6d:
d2:f1:55:b5:31:04:59:2a:d3:33:cd:a2:2b:42:c1:
5b:22:57:65:75:56:72:41:f3:2b:9f:9e:08:f8:1b:
b1:8a:d1:e0:2e:ad:f1:3d:b1:55:a5:3c:33:e6:06:
af:7c:f1:06:03:24:cf:b4:d5:db:5e:f2:3e:8a:b0:
2b:4b:21:2b:9e:ec:88:33:4f:b3:cc:e9:1f:ff:f4:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:2c:1c:03:15:6d:9b:e5:03:1d:d5:4b:4e:de:af:11:21:ef:
23:6d:9c:4a:e9:7e:97:dc:70:82:98:c8:82:5f:3e:b7:e7:55:
bd:59:86:93:13:55:37:b3:77:7f:2b:ee:18:c4:5a:51:e4:f2:
e6:6f:1e:e1:90:17:d8:6d:e4:a3:ab:70:46:1f:85:16:a7:83:
64:b0:27:81:e2:43:dd:a8:6f:ed:56:96:45:61:c8:38:7d:86:
ef:f0:e0:d6:b2:81:78:0d:7a:e6:55:73:9d:38:c6:a0:09:31:
47:1d:ee:dd:ac:53:e6:53:1c:5d:7b:a0:40:6e:ff:47:ec:1f:
ba:a1:66:b1:34:e9:e4:92:99:10:1f:47:e4:74:f2:0b:9b:a3:
b7:ff:a7:e9:b3:42:79:dc:cc:71:cf:ce:20:0b:69:6d:5b:32:
6c:45:26:82:a8:05:94:d2:07:55:37:75:af:06:3b:24:9b:b9:
a0:cf:7e:f1:c4:af:1a:53:9c:4d:e3:6f:17:5b:7a:2c:15:af:
38:78:50:47:c7:b2:02:5b:ee:ce:cd:89:b1:80:cc:4a:cb:1c:
ba:63:14:66:69:1e:75:a6:d9:07:62:f7:59:f1:cc:3d:d6:aa:
9b:ee:56:9b:5c:e0:be:d3:e5:65:0a:16:27:d3:24:99:d5:55:
45:e2:73:01
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIRxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTEwMjE0MDg0MFoXDTI3MDMwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEU5NTExMTAvBgNVBAUTKDE1QkI4MzVEREI1RjI4QjdFM0Y1MTI4
ODdFNTdFOUZFMzE3Mzg3NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGzqPkvAm194Zf7YixNQJx+9J5hFCnOPzNnLKhCcM4n38VAI5fOypUbvYgy+tC
BqNcZ5aKTYuVmbdBC8rStawf3Kd59EgWsWrEmAlC/mSfyhXoakotqY2SfHeCd0WV
EylGqA7Zg/UVpwvPvYOGINexBvOhAd+TMwlmEsHcFJ+mDaoKdwUx/NEsqtPy2H0O
87PuqTUa1iYF+2T1fFJK44oa489pIaTwk0DvDCLOiW9alghQbdLxVbUxBFkq0zPN
oitCwVsiV2V1VnJB8yufngj4G7GK0eAurfE9sVWlPDPmBq988QYDJM+01dte8j6K
sCtLISue7IgzT7PM6R//9P2pAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUFbuDXdtf
KLfj9RKIflfp/jFzh0QwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFOTUxLzUxQkQ3RERBNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RTk1MS81MUJEN0REQTYyM0ExMUYwQTdFMjc2MEJDNEY5QUUwMi9GYnVEWGR0
ZktMZmo5UktJZmxmcF9qRnpoMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGlZX4wDQYJKoZIhvcNAQELBQADggEBAIosHAMVbZvlAx3VS07e
rxEh7yNtnErpfpfccIKYyIJfPrfnVb1ZhpMTVTezd38r7hjEWlHk8uZvHuGQF9ht
5KOrcEYfhRang2SwJ4HiQ92ob+1WlkVhyDh9hu/w4NaygXgNeuZVc504xqAJMUcd
7t2sU+ZTHF17oEBu/0fsH7qhZrE06eSSmRAfR+R08gubo7f/p+mzQnnczHHPziAL
aW1bMmxFJoKoBZTSB1U3da8GOySbuaDPfvHErxpTnE3jbxdbeiwVrzh4UEfHsgJb
7s7NibGAzErLHLpjFGZpHnWm2Qdi91nxzD3WqpvuVptc4L7T5WUKFifTJJnVVUXi
cwE=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:02:47 2026 by rpki-client