Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.cer (raw, json)
Hash identifier: wXy+EXS5dgJfRaw+pbPo9KWVzuEXziTr6H0QbWsgROQ=
Subject key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 765F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:03 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.58.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30303 (0x765f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:03 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:f8:51:f8:1e:2a:12:66:e1:47:da:73:6b:
9e:8e:de:86:7d:5a:13:da:12:e2:4f:3d:dd:e9:2f:
b0:ef:69:ae:be:73:32:48:72:de:ef:47:50:5c:2c:
91:b9:b1:a7:2e:bb:a7:8b:7e:7c:e1:14:56:68:d3:
b3:58:aa:f8:5a:0d:d3:60:19:0d:60:38:12:a6:ed:
bf:c3:c0:99:2d:f9:70:f4:b2:ab:7d:b7:70:bf:ea:
e7:ff:c4:2f:1d:d7:96:5b:45:6e:f0:0e:91:d4:de:
7b:e8:a8:58:f3:5c:f1:98:d7:0c:02:3f:57:17:85:
79:00:01:77:16:da:c6:06:16:77:8b:e2:ee:c1:b5:
e1:59:4b:54:88:3c:20:3d:02:71:43:75:c8:91:7d:
4e:06:7a:8a:3f:82:f6:77:11:bc:58:03:e8:68:d5:
12:97:4c:fa:05:87:88:88:54:71:82:94:1d:34:2c:
5c:5b:e9:be:48:c6:c6:45:09:9b:1f:a2:f0:0f:1a:
f1:7c:20:fa:7c:ee:91:f9:f5:91:2b:af:d3:67:52:
bf:4f:45:4b:95:92:2d:b1:31:cb:2e:f7:15:89:32:
b1:06:b3:f6:00:27:a8:a7:c5:21:83:d3:e2:99:04:
f9:c0:14:d3:84:17:8b:5e:bb:c8:66:e3:a3:a6:3b:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.58.0/23
Signature Algorithm: sha256WithRSAEncryption
39:e8:5a:8f:fb:dd:5f:47:93:d8:ee:e3:bd:96:7e:8b:d3:97:
48:2d:bf:8f:90:cb:3f:b3:96:bd:b1:4d:27:3a:8f:72:cd:5a:
43:40:50:f9:04:6d:5e:80:21:90:08:26:b4:d1:86:29:06:1a:
8e:c5:e1:8c:fa:6e:cd:80:2d:44:2a:2d:f6:24:47:00:aa:02:
83:0f:8e:7a:11:83:f0:e6:03:9d:cf:28:41:8a:29:84:b9:12:
d0:9a:5b:70:21:b2:5e:8e:02:6d:23:dd:e5:86:18:12:94:f4:
f7:2e:ac:b1:c1:b7:d3:02:db:da:d1:06:d2:42:6f:aa:f7:70:
91:5f:70:56:03:7b:16:5c:2c:4b:c3:98:d5:49:a0:f3:f0:82:
fa:bc:21:d4:90:54:51:c8:f2:00:20:ef:9e:4e:91:77:83:3f:
44:33:a5:8a:54:1e:3a:c6:a8:13:a3:bd:97:c2:ab:ba:17:1f:
3c:3a:af:71:d3:6b:30:4c:da:e8:fd:0c:19:7a:ea:a5:02:2a:
e0:94:79:20:82:99:85:3a:c0:71:98:eb:1f:e0:36:3a:55:a9:
18:26:a0:d1:8d:93:e2:65:bb:fe:e1:c1:06:2a:be:90:ed:78:
df:ca:49:02:00:08:8e:7f:0a:d5:97:aa:a6:72:95:cc:d6:9d:
5a:94:40:d5
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1NjAzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCNkI0QjExMC8GA1UEBRMoMkEwMEZENUQ1RUFFRjgxRjMyQjAwQjJF
NUM4MkM1RUNEQUMxMjY5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANad+FH4HioSZuFH2nNrno7ehn1aE9oS4k893ekvsO9prr5zMkhy3u9HUFwskbmx
py67p4t+fOEUVmjTs1iq+FoN02AZDWA4Eqbtv8PAmS35cPSyq323cL/q5//ELx3X
lltFbvAOkdTee+ioWPNc8ZjXDAI/VxeFeQABdxbaxgYWd4vi7sG14VlLVIg8ID0C
cUN1yJF9TgZ6ij+C9ncRvFgD6GjVEpdM+gWHiIhUcYKUHTQsXFvpvkjGxkUJmx+i
8A8a8Xwg+nzukfn1kSuv02dSv09FS5WSLbExyy73FYkysQaz9gAnqKfFIYPT4pkE
+cAU04QXi167yGbjo6Y7yXcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQqAP1dXq74
HzKwCy5cgsXs2sEmkzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjZCNEIvQkI0MkMxREUyNEMzMTFGMDk2QzY4NDgxQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI2QjRCL0JCNDJDMURFMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1
LUI4eXNBc3VYSUxGN05yQkpwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH4OjANBgkqhkiG9w0BAQsFAAOCAQEAOehaj/vdX0eT2O7jvZZ+
i9OXSC2/j5DLP7OWvbFNJzqPcs1aQ0BQ+QRtXoAhkAgmtNGGKQYajsXhjPpuzYAt
RCot9iRHAKoCgw+OehGD8OYDnc8oQYophLkS0JpbcCGyXo4CbSPd5YYYEpT09y6s
scG30wLb2tEG0kJvqvdwkV9wVgN7FlwsS8OY1Umg8/CC+rwh1JBUUcjyACDvnk6R
d4M/RDOlilQeOsaoE6O9l8KruhcfPDqvcdNrMEza6P0MGXrqpQIq4JR5IIKZhTrA
cZjrH+A2OlWpGCag0Y2T4mW7/uHBBiq+kO1438pJAgAIjn8K1ZeqpnKVzNadWpRA
1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:22 2026 by rpki-client