Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
File: HLS_2cCnMryPSmDIaUyR-DTKvBM.cer (raw, json)
Hash identifier: 9nxV963pZ34E5ztHQhl17guvKbTk6V93iXI6Gcwp/RI=
Subject key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 79A6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 14:43:55 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 148.66.128.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31142 (0x79a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 8 14:43:55 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91D83D0, serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:4a:01:c7:8c:e7:52:e2:7a:e4:67:37:5d:
4a:0e:28:05:45:6f:74:c2:c8:0b:5a:6f:25:37:89:
f7:0e:9b:ea:7f:2f:63:91:e1:3b:3e:5b:ba:8d:f3:
83:a8:9f:47:8c:97:05:5c:09:16:b0:dd:bc:82:ad:
97:76:5d:ba:63:d5:a9:40:78:24:3e:b0:e7:e6:69:
9a:98:fe:0a:a5:e3:64:5f:a8:0f:a7:37:72:43:e5:
dc:14:ff:64:89:79:0d:86:1d:63:d8:ec:6f:92:d9:
12:ec:9e:1d:44:bd:82:fc:1a:15:c1:a5:49:51:33:
ba:18:c0:10:a4:89:37:2c:76:1f:54:2e:40:2d:59:
5a:2f:5e:c1:34:ec:f2:db:d1:14:52:de:36:5a:0d:
16:b0:b7:5d:cf:cd:04:49:b1:00:14:00:e0:6d:95:
72:c2:cb:70:0f:e4:29:6b:3c:bc:4f:31:dd:4b:22:
8e:67:0b:50:66:56:e9:b6:a2:55:97:98:56:99:0d:
14:97:41:89:1f:b4:18:9d:f1:c2:51:10:51:b0:95:
07:c9:4e:82:69:d2:b4:78:8f:af:22:bf:fa:b9:29:
ce:df:98:62:35:5a:9b:9f:82:fb:12:94:b6:1f:26:
d8:88:8a:a7:d8:c8:f7:fe:2d:62:b1:08:c7:d7:9d:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.66.128.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:59:b6:ca:7a:ca:2e:7e:29:4f:77:2e:c0:21:c6:6c:0e:64:
f0:54:7f:52:a4:60:e0:ca:a3:0a:66:ea:cf:da:c5:f8:df:4b:
ae:74:13:7e:05:34:17:6e:63:fe:a2:70:94:7a:7d:b3:c5:62:
5f:42:97:42:1d:81:11:11:8e:85:24:6c:ca:58:eb:c7:bd:73:
54:b2:9d:27:36:b5:49:a6:a4:5c:8c:01:75:01:12:f8:f3:32:
58:69:69:31:18:35:7d:79:6c:6f:ad:3c:c8:10:0b:de:f4:01:
c7:c0:85:3c:23:81:39:63:f2:2d:16:d0:88:16:03:39:51:11:
00:88:e2:c5:53:76:4b:d8:6e:fa:c4:4a:0f:d1:f8:8c:ed:18:
eb:3f:ce:ed:9d:a6:62:d6:63:13:52:76:2d:37:ef:78:bc:32:
74:19:85:cb:67:de:6e:ef:d1:fb:9a:4a:90:b3:26:e4:bb:7b:
f7:58:06:2e:ff:5e:3f:92:e2:16:fa:de:7f:03:9f:e1:6c:5b:
b8:04:ed:eb:ce:da:82:fd:57:bc:55:1e:3b:47:74:8c:bd:be:
d3:c3:0b:95:15:b7:d0:82:6c:49:d4:9f:f8:6f:79:37:ca:9a:
3b:c5:22:c2:d7:12:a2:7b:55:01:5a:e1:9e:f8:65:ee:75:a2:
88:9b:85:f6
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNDA4MTQ0MzU1WhcNMjcwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFEODNEMDExMC8GA1UEBRMoMUNCNEJGRDlDMEE3MzJCQzhGNEE2MEM4
Njk0QzkxRjgzNENBQkMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANtrSgHHjOdS4nrkZzddSg4oBUVvdMLIC1pvJTeJ9w6b6n8vY5HhOz5buo3zg6if
R4yXBVwJFrDdvIKtl3ZdumPVqUB4JD6w5+Zpmpj+CqXjZF+oD6c3ckPl3BT/ZIl5
DYYdY9jsb5LZEuyeHUS9gvwaFcGlSVEzuhjAEKSJNyx2H1QuQC1ZWi9ewTTs8tvR
FFLeNloNFrC3Xc/NBEmxABQA4G2VcsLLcA/kKWs8vE8x3UsijmcLUGZW6baiVZeY
VpkNFJdBiR+0GJ3xwlEQUbCVB8lOgmnStHiPryK/+rkpzt+YYjVam5+C+xKUth8m
2IiKp9jI9/4tYrEIx9ed/dsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQctL/ZwKcy
vI9KYMhpTJH4NMq8EzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDgzRDAvMDMxMTYzMTJBRkJDMTFFQUE5NjFDQjg2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ4M0QwLzAzMTE2MzEyQUZCQzExRUFBOTYxQ0I4NkM0RjlBRTAyL0hMU18yY0Nu
TXJ5UFNtRElhVXlSLURUS3ZCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBZRCgDANBgkqhkiG9w0BAQsFAAOCAQEAvFm2ynrKLn4pT3cuwCHG
bA5k8FR/UqRg4MqjCmbqz9rF+N9LrnQTfgU0F25j/qJwlHp9s8ViX0KXQh2BERGO
hSRsyljrx71zVLKdJza1SaakXIwBdQES+PMyWGlpMRg1fXlsb608yBAL3vQBx8CF
PCOBOWPyLRbQiBYDOVERAIjixVN2S9hu+sRKD9H4jO0Y6z/O7Z2mYtZjE1J2LTfv
eLwydBmFy2febu/R+5pKkLMm5Lt791gGLv9eP5LiFvrefwOf4WxbuATt687agv1X
vFUeO0d0jL2+08MLlRW30IJsSdSf+G95N8qaO8UiwtcSontVAVrhnvhl7nWiiJuF
9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:34:59 2026 by rpki-client