
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
File: GcmgwhkwwW6kFprC6-3H5snXtS8.cer (raw, json)
Hash identifier: f605DG1uYuQBbiymt4BPoQgDY6M6CQrneP9Kh/HIwYM=
Subject key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 756F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:17 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30063 (0x756f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:f4:63:b2:08:ab:d6:49:e4:ce:41:4e:cb:
85:9c:82:19:da:75:1c:1d:9c:70:ac:2b:d4:9b:e8:
56:ff:0b:bf:45:9f:4a:12:42:d0:7d:99:17:78:3e:
b1:86:04:51:a5:95:f8:47:51:cb:e2:4d:0b:41:b3:
16:dc:47:1f:da:90:39:14:bd:1a:f1:f5:2f:6d:f0:
53:8a:72:90:ff:55:79:d9:9e:92:a8:69:cf:77:f9:
e1:73:c1:60:06:ea:7c:57:82:65:b7:43:49:df:a9:
b5:1f:28:ac:bf:cc:06:06:64:0e:4a:e0:b4:ae:7a:
a9:2c:9d:0c:6f:10:c2:ee:2c:04:e2:c7:d0:b1:95:
02:f5:e1:44:99:8a:ce:9e:90:4a:06:0c:1b:56:a0:
ec:49:7f:ff:e5:4d:08:17:14:47:4d:5d:5c:9d:51:
dc:5a:a0:08:aa:d2:0a:73:da:38:7a:ee:00:5c:91:
29:76:d3:dc:52:91:6d:80:c2:52:8e:b4:41:f8:25:
fc:44:5c:a9:e7:e7:2c:dd:2a:f4:d8:c6:01:79:ad:
78:ff:bb:00:58:64:36:fb:0d:4e:8d:d7:91:36:9a:
1d:a7:aa:fa:53:d6:d1:ee:dc:c5:1f:9d:35:67:be:
9a:0f:b4:57:06:14:d1:91:66:a3:1e:c9:0c:cc:6d:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.218.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:0a:22:de:27:3b:96:c2:f8:ca:4e:f1:19:56:ce:0f:03:4f:
8b:48:57:e0:4e:e4:fc:f4:0d:52:6b:74:13:f5:29:d5:1f:f5:
d8:9f:ed:3c:71:38:e2:93:2f:20:dd:94:ff:35:57:01:e6:f3:
c5:44:b9:4e:ca:44:15:17:57:e9:44:ce:1c:ed:12:45:48:42:
fd:82:3f:90:00:d0:4e:a0:c3:fc:ae:54:cd:49:31:df:ae:12:
4e:a5:8a:9d:72:50:a2:be:73:68:d1:7f:2c:6a:2e:fb:23:af:
58:d4:2e:17:32:2c:70:b1:c1:ea:2f:ea:04:a1:28:60:c7:09:
b4:8d:aa:3f:23:41:a7:fd:11:cb:6a:1f:c3:10:6d:67:ca:47:
9e:1e:d8:bd:be:a8:35:77:1b:d5:6a:2f:aa:69:94:6e:01:3b:
e9:71:52:47:fc:1a:fa:e0:9b:5a:61:dc:69:7d:79:c8:a8:50:
65:6d:6d:e1:a2:e5:55:b4:36:d0:fa:75:1f:ff:3f:e6:75:e4:
76:e2:23:fd:64:6f:50:89:9f:b7:7b:0e:af:f6:8c:cd:7b:db:
f4:a6:a2:c0:e2:2f:e0:0f:33:ad:f5:a4:e1:e9:79:19:37:48:
c0:31:da:08:c7:52:10:9a:78:de:6e:df:d8:54:e0:71:04:63:
7d:cf:6d:4a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MTE3WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMy
RUJFREM3RTZDOUQ3QjUyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKTe9GOyCKvWSeTOQU7LhZyCGdp1HB2ccKwr1JvoVv8Lv0WfShJC0H2ZF3g+sYYE
UaWV+EdRy+JNC0GzFtxHH9qQORS9GvH1L23wU4pykP9Vedmekqhpz3f54XPBYAbq
fFeCZbdDSd+ptR8orL/MBgZkDkrgtK56qSydDG8Qwu4sBOLH0LGVAvXhRJmKzp6Q
SgYMG1ag7El//+VNCBcUR01dXJ1R3FqgCKrSCnPaOHruAFyRKXbT3FKRbYDCUo60
Qfgl/ERcqefnLN0q9NjGAXmteP+7AFhkNvsNTo3XkTaaHaeq+lPW0e7cxR+dNWe+
mg+0VwYU0ZFmox7JDMxtKpMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQZyaDCGTDB
bqQWmsLr7cfmyde1LzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJDQkEvMzQwMEM3MThFNjJDMTFGMDk3NkE5NUZCNkY2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZCQ0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3
d1c2a0ZwckM2LTNINXNuWHRTOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZBP2jANBgkqhkiG9w0BAQsFAAOCAQEADAoi3ic7lsL4yk7xGVbO
DwNPi0hX4E7k/PQNUmt0E/Up1R/12J/tPHE44pMvIN2U/zVXAebzxUS5TspEFRdX
6UTOHO0SRUhC/YI/kADQTqDD/K5UzUkx364STqWKnXJQor5zaNF/LGou+yOvWNQu
FzIscLHB6i/qBKEoYMcJtI2qPyNBp/0Ry2ofwxBtZ8pHnh7Yvb6oNXcb1WovqmmU
bgE76XFSR/wa+uCbWmHcaX15yKhQZW1t4aLlVbQ20Pp1H/8/5nXkduIj/WRvUImf
t3sOr/aMzXvb9KaiwOIv4A8zrfWk4el5GTdIwDHaCMdSEJp43m7f2FTgcQRjfc9t
Sg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:44 2026 by rpki-client