Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
File: PXsVvXfZuXTjc1jadU3-qSkeaDo.cer (raw, json)
Hash identifier: tUPE9K6jDzzrQdexkrDhtuJV7pRd93H01PajdfIHJCc=
Subject key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F79
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 12:53:42 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 3491
AS: 6279
AS: 7262
IP: 63.216.0.0/13
IP: 65.72.0.0/16
IP: 205.177.0.0/16
IP: 205.252.0.0/16
IP: 206.161.0.0/16
IP: 207.176.0.0/17
IP: 207.226.0.0/16
IP: 209.8.0.0/15
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32633 (0x7f79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 28 12:53:42 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:34:96:7f:5b:ea:b5:a5:a8:b4:db:10:50:
02:ea:d6:9f:a6:33:14:79:e8:4a:44:5b:40:bc:3d:
66:d1:00:fa:fa:77:5a:42:2d:df:24:8b:a7:41:b6:
a9:75:34:28:1d:a3:dd:54:4d:8a:4f:d1:79:f3:d9:
87:50:88:f6:04:19:75:99:10:8c:cb:5f:80:08:7c:
59:27:7e:a5:a6:3b:de:61:3f:32:cf:d2:00:1b:f2:
ad:4c:1a:fd:26:7b:69:7a:fa:4b:39:5c:17:66:dc:
85:84:a1:bb:54:50:10:14:6a:0d:c8:b7:4f:a0:cd:
0d:0b:8b:62:52:a3:af:fd:32:f3:55:81:5b:98:65:
f8:5b:c6:2b:c4:ba:7f:c8:1f:c5:ec:2f:85:d6:cd:
ec:00:8b:37:cd:d7:cb:cd:6e:21:88:45:97:e7:ed:
51:40:ac:d5:88:5f:2c:bd:89:5b:b3:aa:11:87:0a:
91:e8:96:ae:bd:af:3a:44:0b:59:e4:35:92:25:08:
03:0c:35:68:aa:f9:67:d3:eb:48:e2:85:92:e9:75:
e0:15:ca:e6:75:a1:3c:7a:78:01:e1:1b:64:22:41:
39:6b:20:e0:37:2d:23:d8:6a:3a:86:b7:35:ba:85:
0b:f0:eb:d3:6d:80:f4:92:50:54:3f:08:8a:93:9c:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3491
6279
7262
sbgp-ipAddrBlock: critical
IPv4:
63.216.0.0/13
65.72.0.0/16
205.177.0.0/16
205.252.0.0/16
206.161.0.0/16
207.176.0.0/17
207.226.0.0/16
209.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
49:2f:e0:0c:3c:03:e6:ce:8c:99:75:ee:4d:5d:07:f8:cb:37:
de:0b:f8:89:ee:f7:83:3e:e8:31:5b:eb:06:2f:93:8b:54:a9:
7c:1a:38:e8:b1:6f:2e:12:d0:a4:c8:66:91:91:ba:1e:a5:62:
aa:aa:21:e0:db:db:05:21:48:dc:4e:00:94:a8:ac:f3:74:e3:
20:22:a6:06:ca:6d:05:d0:ff:28:39:55:ac:fd:b9:71:57:ee:
0c:9e:54:7c:e2:c3:e1:b7:f4:bc:f0:3b:e4:85:28:ff:d4:ae:
28:23:75:c9:88:1c:90:a7:61:1b:ab:87:bb:f6:c9:76:8b:3f:
81:92:32:16:aa:81:f5:f6:6f:ca:6d:64:02:67:c5:7a:54:74:
20:39:71:8a:81:62:cd:5d:a8:68:11:c1:46:96:81:b2:a1:c0:
b8:51:d5:38:cf:ae:6d:15:4f:89:b6:03:8d:23:8a:cb:cf:7e:
e9:8a:84:60:de:66:c0:eb:b9:69:fb:e3:a6:81:dc:e7:e4:c7:
49:19:76:e9:90:dc:10:87:bd:21:4a:96:cf:ca:9c:ac:33:a1:
7f:73:ce:4e:8c:4f:9b:b4:59:7b:92:65:58:2a:c3:42:44:6f:
d4:b8:ac:22:9b:be:3a:b1:0e:9d:44:88:b8:54:5a:7a:53:ab:
1e:04:1c:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgICf3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzI4MTI1MzQyWhcNMjcwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzMDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERB
NzU0REZFQTkyOTFFNjgzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMP0NJZ/W+q1pai02xBQAurWn6YzFHnoSkRbQLw9ZtEA+vp3WkIt3ySLp0G2qXU0
KB2j3VRNik/RefPZh1CI9gQZdZkQjMtfgAh8WSd+paY73mE/Ms/SABvyrUwa/SZ7
aXr6SzlcF2bchYShu1RQEBRqDci3T6DNDQuLYlKjr/0y81WBW5hl+FvGK8S6f8gf
xewvhdbN7ACLN83Xy81uIYhFl+ftUUCs1YhfLL2JW7OqEYcKkeiWrr2vOkQLWeQ1
kiUIAww1aKr5Z9PrSOKFkul14BXK5nWhPHp4AeEbZCJBOWsg4DctI9hqOoa3NbqF
C/Dr022A9JJQVD8IipOchz8CAwEAAaOCAzkwggM1MB0GA1UdDgQWBBQ9exW9d9m5
dONzWNp1Tf6pKR5oOjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMwNEE5L0ZEMzcyRTRBMjk0NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZa
dVhUamMxamFkVTMtcVNrZWFEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAhBggrBgEFBQcBCAEB/wQSMBCg
DjAMAgINowICGIcCAhxeMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIAATApAwMDP9gD
AwBBSAMDAM2xAwMAzfwDAwDOoQMEB8+wAAMDAM/iAwMB0QgwDQYJKoZIhvcNAQEL
BQADggEBAEkv4Aw8A+bOjJl17k1dB/jLN94L+Inu94M+6DFb6wYvk4tUqXwaOOix
by4S0KTIZpGRuh6lYqqqIeDb2wUhSNxOAJSorPN04yAipgbKbQXQ/yg5Vaz9uXFX
7gyeVHziw+G39LzwO+SFKP/UrigjdcmIHJCnYRurh7v2yXaLP4GSMhaqgfX2b8pt
ZAJnxXpUdCA5cYqBYs1dqGgRwUaWgbKhwLhR1TjPrm0VT4m2A40jisvPfumKhGDe
ZsDruWn746aB3Ofkx0kZdumQ3BCHvSFKls/KnKwzoX9zzk6MT5u0WXuSZVgqw0JE
b9S4rCKbvjqxDp1EiLhUWnpTqx4EHJ0=
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:30 2026 by rpki-client