Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
File: ISgYkHWJssqEa0nRCd0zrJ4utUM.cer (raw, json)
Hash identifier: 3yRfOq/MOrhIJrXUlbEEhVDsWFn0RUJef4jPA9uJ59o=
Subject key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7FBA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 13:01:36 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.54.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32698 (0x7fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 30 13:01:36 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:4e:f4:19:e4:dc:64:4d:d8:96:58:7c:66:
4f:fa:65:a8:4e:88:e4:b0:8e:e8:6a:1d:13:51:72:
64:05:4f:6d:8b:ca:36:a5:e5:c0:dc:a9:b3:ef:bc:
d7:1a:71:fb:4d:d1:8f:c5:66:1c:86:c6:1c:84:5c:
2c:de:82:df:23:1e:13:61:f5:15:9a:f2:aa:1a:c3:
41:ae:55:60:bb:4c:1e:00:56:d1:51:4d:a5:0b:2b:
ef:19:05:77:64:80:aa:6b:a9:52:15:60:8e:51:7c:
ca:61:26:47:8f:93:65:82:33:b0:e6:17:53:b8:b6:
02:44:e8:a9:8a:bc:d1:47:8b:a2:d1:92:82:3c:16:
4a:0d:08:54:e3:b7:ee:b1:76:44:5a:cd:fd:b3:ba:
39:76:9f:08:bf:3c:17:0d:97:d0:6a:e8:7f:4d:82:
7c:ee:e5:37:ce:d9:58:19:88:b6:03:b4:77:5d:cc:
c0:58:9d:ee:94:83:1c:45:af:2e:0c:c3:dc:98:0d:
c2:81:80:e6:0c:62:2b:df:6d:74:3e:be:b3:e7:5f:
26:59:a1:2f:d5:bc:d8:62:15:d2:ec:7b:e4:c2:43:
20:6e:b8:8a:22:cf:97:f9:e6:59:ec:8c:21:d6:1a:
e0:10:03:41:19:5a:e0:1f:b1:ee:84:d6:75:3e:59:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.54.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:1c:11:03:c0:55:29:c3:0f:23:16:5e:ca:ee:bc:c7:37:19:
0f:78:0a:a4:2d:be:fd:30:ad:15:39:0a:c2:8b:fb:ba:74:78:
58:ff:b8:42:62:42:6d:5a:d7:29:3c:f0:1a:84:d5:17:6c:db:
27:dc:67:a0:af:61:72:42:71:12:97:40:ed:34:a9:fd:23:6a:
7c:34:71:c9:7c:43:65:95:3a:07:46:31:c7:1f:3d:04:89:f1:
2b:9e:89:47:d7:ef:4c:dd:c0:15:c3:81:b8:4f:7f:c9:86:f2:
bd:69:2e:6b:c1:33:b0:cb:c2:43:0f:8d:07:04:4e:b8:7f:ff:
28:28:01:45:66:72:bb:43:08:9b:31:56:ee:f0:85:b8:f4:5f:
c4:7a:cf:70:c5:aa:6c:d7:79:0b:ce:df:7b:ae:ee:a4:e3:87:
08:51:20:9a:6b:8c:32:b0:23:0e:be:bc:b1:e1:0d:7d:ed:a8:
af:c1:3a:5e:44:85:86:ee:69:d6:01:a2:37:01:ee:3a:01:6d:
6d:80:5d:26:75:79:99:4c:d2:56:cc:69:90:65:85:fa:92:49:
0b:3f:04:ab:1b:97:eb:bf:79:0c:8b:b4:78:ad:b4:c8:1f:27:
92:88:4e:1f:99:a3:a6:d7:24:05:1e:1c:dc:8c:cb:bc:5c:8b:
0a:e9:99:7e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICf7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzMwMTMwMTM2WhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzNjk1RTExMC8GA1UEBRMoMjEyODE4OTA3NTg5QjJDQTg0NkI0OUQx
MDlERDMzQUM5RTJFQjU0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJV9TvQZ5NxkTdiWWHxmT/plqE6I5LCO6GodE1FyZAVPbYvKNqXlwNyps++81xpx
+03Rj8VmHIbGHIRcLN6C3yMeE2H1FZryqhrDQa5VYLtMHgBW0VFNpQsr7xkFd2SA
qmupUhVgjlF8ymEmR4+TZYIzsOYXU7i2AkToqYq80UeLotGSgjwWSg0IVOO37rF2
RFrN/bO6OXafCL88Fw2X0Grof02CfO7lN87ZWBmItgO0d13MwFid7pSDHEWvLgzD
3JgNwoGA5gxiK99tdD6+s+dfJlmhL9W82GIV0ux75MJDIG64iiLPl/nmWeyMIdYa
4BADQRla4B+x7oTWdT5Z30MCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQhKBiQdYmy
yoRrSdEJ3TOsni61QzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzY5NUUvRTdCMzQ5NzI1MzQwMTFGMDhDODY5NDQxQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM2OTVFL0U3QjM0OTcyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdK
c3NxRWEwblJDZDB6cko0dXRVTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVlNjANBgkqhkiG9w0BAQsFAAOCAQEAehwRA8BVKcMPIxZeyu68
xzcZD3gKpC2+/TCtFTkKwov7unR4WP+4QmJCbVrXKTzwGoTVF2zbJ9xnoK9hckJx
EpdA7TSp/SNqfDRxyXxDZZU6B0Yxxx89BInxK56JR9fvTN3AFcOBuE9/yYbyvWku
a8EzsMvCQw+NBwROuH//KCgBRWZyu0MImzFW7vCFuPRfxHrPcMWqbNd5C87fe67u
pOOHCFEgmmuMMrAjDr68seENfe2or8E6XkSFhu5p1gGiNwHuOgFtbYBdJnV5mUzS
VsxpkGWF+pJJCz8EqxuX6795DIu0eK20yB8nkohOH5mjptckBR4c3IzLvFyLCumZ
fg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:22:55 2026 by rpki-client