
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
File: PLSpAEGL6dzcXgSgumKoTahf5uA.cer (raw, json)
Hash identifier: uZbcLja+vLEcmh12MxvJ9Ci1XHz4Z9BGoPnSSpshZnw=
Subject key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7CAA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Jun 2026 05:30:12 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 10:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31914 (0x7caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 9 05:30:12 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:aa:78:d0:ec:b4:86:94:2a:49:f9:47:b3:
e9:9d:1e:cb:1d:14:ee:b7:36:e4:8e:1a:60:d9:9e:
48:04:15:93:11:63:24:75:ea:7f:1f:72:c3:7c:ca:
94:19:ee:6f:26:3c:94:af:0a:c1:d6:cf:13:10:49:
41:8a:b8:93:72:bd:e5:0d:84:17:12:20:de:6e:bc:
f8:60:3b:08:cd:51:67:c1:cc:a5:cb:de:34:29:32:
f9:51:3d:8d:72:8d:27:a5:5e:bc:8b:1e:d5:79:66:
77:39:9e:21:56:d2:65:e8:57:b1:29:97:fd:76:bd:
2b:f3:2f:ad:a0:9c:dd:c4:19:0e:74:84:57:02:81:
bf:38:3e:86:0a:85:c9:2e:39:54:26:d8:21:69:a4:
56:42:51:e6:f3:78:0f:c1:99:13:ed:e2:89:1b:75:
a2:a2:09:67:1d:b0:8c:e1:31:ea:c2:e3:f1:61:db:
60:36:8d:09:a5:dc:ad:60:3f:b1:bb:c8:c6:c1:ed:
8a:ca:cd:b5:4b:b2:7b:31:ab:a6:4c:4b:66:1f:8e:
3d:57:50:f9:87:5c:cd:31:07:80:ad:b8:1b:60:ba:
ca:75:a3:09:4b:f0:84:1b:17:8f:25:70:63:be:f7:
b5:49:25:33:f2:bf:41:9f:3f:f7:1a:a2:70:f6:02:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.178.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:02:bc:30:11:94:33:e4:69:70:1d:3d:c7:1a:59:95:ef:bd:
14:21:48:b7:05:be:d1:89:1a:f4:38:0b:02:c8:04:18:50:4f:
34:6f:7b:f3:c5:78:57:f1:42:47:09:14:09:7c:ea:9e:5c:e8:
e3:1a:25:20:36:d4:07:53:ed:5b:05:05:d0:d1:7b:39:62:9e:
a2:23:36:b4:bf:a3:6d:05:24:cf:63:65:c5:b2:d3:c0:fd:f6:
94:db:57:1c:07:55:ed:67:fc:c5:c8:6f:4b:87:56:ca:3e:18:
ec:8e:00:24:89:cf:aa:42:7c:4c:75:68:24:3a:68:3d:ad:d0:
d2:cb:46:ba:e2:d8:16:07:f2:df:df:a3:07:36:fe:af:26:3d:
1c:09:7e:da:9f:a8:c7:7b:ae:76:4d:18:ae:b1:e8:93:b4:e7:
74:c4:41:b2:5e:98:14:72:1c:5b:dd:48:70:5e:50:d3:05:d1:
4e:31:09:c0:98:2b:51:bd:be:d2:94:d5:63:6c:b0:6b:b8:10:
a0:6c:d3:e7:31:51:d9:8b:2b:ac:fc:b5:a1:a5:11:ce:c4:59:
b0:ec:bf:0b:72:7c:4b:90:69:7c:1c:8e:23:4e:8a:fa:97:4d:
58:c3:69:24:0f:75:17:6a:70:fd:d8:48:1c:0f:61:74:ee:75:
93:c6:c0:a5
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjA5MDUzMDEyWhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFEMEZDQjExMC8GA1UEBRMoM0NCNEE5MDA0MThCRTlEQ0RDNUUwNEEw
QkE2MkE4NERBODVGRTZFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALhyqnjQ7LSGlCpJ+Uez6Z0eyx0U7rc25I4aYNmeSAQVkxFjJHXqfx9yw3zKlBnu
byY8lK8KwdbPExBJQYq4k3K95Q2EFxIg3m68+GA7CM1RZ8HMpcveNCky+VE9jXKN
J6VevIse1XlmdzmeIVbSZehXsSmX/Xa9K/MvraCc3cQZDnSEVwKBvzg+hgqFyS45
VCbYIWmkVkJR5vN4D8GZE+3iiRt1oqIJZx2wjOEx6sLj8WHbYDaNCaXcrWA/sbvI
xsHtisrNtUuyezGrpkxLZh+OPVdQ+YdczTEHgK24G2C6ynWjCUvwhBsXjyVwY773
tUklM/K/QZ8/9xqicPYCYk0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ8tKkAQYvp
3NxeBKC6YqhNqF/m4DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBGQ0IvODlDNzhGNzA4MTY5MTFFRjgyMTNGQjBDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQwRkNCLzg5Qzc4RjcwODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdM
NmR6Y1hnU2d1bUtvVGFoZjV1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAWsjANBgkqhkiG9w0BAQsFAAOCAQEAsAK8MBGUM+RpcB09xxpZ
le+9FCFItwW+0Yka9DgLAsgEGFBPNG9788V4V/FCRwkUCXzqnlzo4xolIDbUB1Pt
WwUF0NF7OWKeoiM2tL+jbQUkz2NlxbLTwP32lNtXHAdV7Wf8xchvS4dWyj4Y7I4A
JInPqkJ8THVoJDpoPa3Q0stGuuLYFgfy39+jBzb+ryY9HAl+2p+ox3uudk0YrrHo
k7TndMRBsl6YFHIcW91IcF5Q0wXRTjEJwJgrUb2+0pTVY2ywa7gQoGzT5zFR2Ysr
rPy1oaURzsRZsOy/C3J8S5BpfByOI06K+pdNWMNpJA91F2pw/dhIHA9hdO51k8bA
pQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:52:39 2026 by rpki-client