Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WzqujWWm_PgxvQ7O0s09t7BlRiY.cer
File: WzqujWWm_PgxvQ7O0s09t7BlRiY.cer (raw, json)
Hash identifier: kQABfwpVl6hKzYhyD+8b6hfew+8WQrNz6XkKgvoZYPA=
Subject key identifier: 5B:3A:AE:8D:65:A6:FC:F8:31:BD:0E:CE:D2:CD:3D:B7:B0:65:46:26
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8406
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190526/EAAAE05CD21711F18FDA84D90F66CEF9/WzqujWWm_PgxvQ7O0s09t7BlRiY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190526/EAAAE05CD21711F18FDA84D90F66CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Oct 2026 15:06:02 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 64.127.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33798 (0x8406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 27 15:06:02 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9190526, serialNumber=5B3AAE8D65A6FCF831BD0ECED2CD3DB7B0654626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:d0:d8:05:55:ed:c3:ba:ea:e6:1a:dc:f4:
4d:7e:30:07:02:8b:84:45:b6:f3:ce:c3:a9:a8:6f:
c5:c0:26:90:ef:87:f2:d0:a2:aa:8b:49:56:d1:29:
fb:97:fd:66:75:0e:c4:b7:bd:0d:e5:9e:1d:d5:63:
a9:d4:9d:df:42:bd:9c:e5:1c:44:fe:47:ca:91:0e:
0d:da:74:24:37:6b:bb:0b:dc:43:7c:96:cb:c2:dc:
f2:b4:80:21:59:e1:4d:42:ba:90:9f:3d:8c:f4:16:
ca:37:92:9b:c0:3d:75:18:03:c0:b8:2d:3b:22:12:
f2:6b:53:5e:48:65:64:45:c3:c0:1d:52:2e:45:7d:
e7:f8:6e:59:f5:bd:74:11:67:11:68:19:7b:b9:cb:
70:5f:a1:29:44:5d:a7:80:fd:c6:96:2b:40:e2:6a:
8a:bc:ee:3e:d0:f9:54:56:f6:27:65:e6:ec:16:88:
93:fd:6a:01:eb:a6:7e:d0:94:ee:42:e1:25:78:04:
5c:36:de:77:b4:8a:89:b5:cd:0b:d6:cd:23:00:c2:
9f:18:25:f0:0e:00:fd:47:35:7f:31:ea:b6:14:44:
03:cc:45:7e:62:8e:d6:3c:0a:6d:b0:b0:57:09:49:
8a:83:ae:de:55:70:c0:b0:f3:f6:d2:f0:af:51:fd:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:AE:8D:65:A6:FC:F8:31:BD:0E:CE:D2:CD:3D:B7:B0:65:46:26
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190526/EAAAE05CD21711F18FDA84D90F66CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190526/EAAAE05CD21711F18FDA84D90F66CEF9/WzqujWWm_PgxvQ7O0s09t7BlRiY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.127.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:e4:0f:96:0c:c9:4e:98:81:3d:98:c4:8c:12:98:12:c5:c4:
49:3d:4c:f6:b9:df:66:ba:d7:35:58:75:28:4a:2f:3a:4a:05:
0b:29:0b:85:bc:09:3a:ee:b6:20:8b:4e:7f:8f:31:80:d3:4c:
81:c0:75:26:d5:35:ab:48:fa:36:9e:dd:6e:89:85:0a:65:25:
e2:5e:8b:1a:8e:fb:c2:5b:b9:48:c4:a7:ca:1e:8a:8b:ca:ad:
36:86:32:d9:b8:ba:01:16:a0:1b:fc:3e:56:a2:e4:22:b2:16:
8d:6d:9c:3f:9a:45:9c:d0:e4:a9:e3:73:b6:38:c2:97:71:25:
33:c6:9f:70:60:83:a5:48:f5:4e:73:17:67:e5:f1:d5:b9:86:
81:f9:0b:65:d6:f9:29:e2:8c:3d:1b:d7:b0:e5:3e:81:17:63:
37:d8:90:e0:fc:28:fa:c2:41:70:7d:23:b7:bb:a8:0f:5d:33:
ff:54:cb:92:65:6a:a3:cc:eb:20:6c:c7:fd:b3:fc:91:f1:42:
a5:0e:ad:fd:0e:51:7d:fb:39:d9:21:19:8c:34:da:b2:bf:86:
d4:92:67:e2:da:0d:f8:cc:ba:70:3d:74:e7:84:a8:e1:39:75:
3b:e1:21:f6:f6:58:5e:aa:81:25:b9:ca:b7:b9:1a:7a:30:00:
ca:6a:85:5c
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIQGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MTAyNzE1MDYwMloXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTA1MjYxMTAvBgNVBAUTKDVCM0FBRThENjVBNkZDRjgzMUJEMEVD
RUQyQ0QzREI3QjA2NTQ2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChX9DYBVXtw7rq5hrc9E1+MAcCi4RFtvPOw6mob8XAJpDvh/LQoqqLSVbRKfuX
/WZ1DsS3vQ3lnh3VY6nUnd9CvZzlHET+R8qRDg3adCQ3a7sL3EN8lsvC3PK0gCFZ
4U1CupCfPYz0Fso3kpvAPXUYA8C4LTsiEvJrU15IZWRFw8AdUi5Ffef4bln1vXQR
ZxFoGXu5y3BfoSlEXaeA/caWK0Diaoq87j7Q+VRW9idl5uwWiJP9agHrpn7QlO5C
4SV4BFw23ne0iom1zQvWzSMAwp8YJfAOAP1HNX8x6rYURAPMRX5ijtY8Cm2wsFcJ
SYqDrt5VcMCw8/bS8K9R/UepAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUWzqujWWm
/PgxvQ7O0s09t7BlRiYwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkwNTI2L0VBQUFFMDVDRDIxNzExRjE4RkRBODREOTBGNjZDRUY5LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MDUyNi9FQUFBRTA1Q0QyMTcxMUYxOEZEQTg0RDkwRjY2Q0VGOS9XenF1aldX
bV9QZ3h2UTdPMHMwOXQ3QmxSaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAVAf+AwDQYJKoZIhvcNAQELBQADggEBAEzkD5YMyU6YgT2YxIwS
mBLFxEk9TPa532a61zVYdShKLzpKBQspC4W8CTrutiCLTn+PMYDTTIHAdSbVNatI
+jae3W6JhQplJeJeixqO+8JbuUjEp8oeiovKrTaGMtm4ugEWoBv8Plai5CKyFo1t
nD+aRZzQ5Knjc7Y4wpdxJTPGn3Bgg6VI9U5zF2fl8dW5hoH5C2XW+SnijD0b17Dl
PoEXYzfYkOD8KPrCQXB9I7e7qA9dM/9Uy5JlaqPM6yBsx/2z/JHxQqUOrf0OUX37
OdkhGYw02rK/htSSZ+LaDfjMunA9dOeEqOE5dTvhIfb2WF6qgSW5yre5GnowAMpq
hVw=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:28:16 2026 by rpki-client