
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer (raw, json)
Hash identifier: /tNtppFWyb4hJiNoay8+BT7w49OIIyKXoG3hQBUTPio=
Subject key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8182
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 29 Aug 2026 13:57:06 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 148.182.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33154 (0x8182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 29 13:57:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91DDDA7, serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:53:de:3f:52:f7:f9:36:cc:1e:6a:a8:f6:
6f:aa:64:eb:b6:d0:87:1c:52:18:10:e7:c1:72:b9:
ad:25:6e:66:8b:79:5a:1e:31:de:40:a4:87:0c:d4:
1d:34:85:2f:65:3b:97:9b:a5:74:02:42:2f:4f:ee:
98:e4:47:17:36:c3:05:12:47:71:17:3e:d3:88:4f:
c2:8e:2d:e2:1f:4a:bd:63:44:bd:ea:b7:66:a5:2b:
62:a6:07:34:a0:c9:06:98:7d:7f:23:21:55:ba:25:
d2:e9:0d:76:20:cb:28:9b:88:a6:5c:36:c4:53:3f:
df:b5:f1:81:5b:86:72:c7:51:01:c9:22:08:51:2b:
66:33:84:a8:89:a8:c9:53:6d:74:fc:4f:2f:f1:6f:
c9:13:e4:08:7c:19:f7:99:3b:e4:64:97:70:bc:1f:
8f:e2:de:35:98:36:e1:b1:12:32:86:5f:07:89:f1:
5a:a7:0a:15:9a:52:58:e5:41:1b:5a:42:c7:d3:b1:
d8:a4:e7:84:57:8b:c5:8f:93:f5:6c:c8:e6:c4:45:
b0:9d:c6:7d:62:55:34:b3:03:6c:0e:eb:25:e2:9f:
e5:58:a7:bd:f4:9a:2e:8f:43:7e:6f:55:87:0b:da:
46:d3:15:e6:32:ba:2c:c6:d6:be:7a:d9:ab:df:0c:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.182.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:a2:97:bd:a0:38:d2:57:bb:aa:b5:17:27:d0:f1:cd:54:c9:
0e:c9:fb:6f:d1:6b:28:03:df:8b:08:88:78:3b:1d:7b:f2:18:
46:e4:6d:5c:a9:ae:89:94:8c:6a:05:1c:7a:14:ca:52:86:4d:
18:37:48:b2:8b:90:92:15:ef:b0:ab:98:3f:e8:d8:9f:97:66:
d5:ed:e6:df:50:9b:58:04:ea:1c:67:fc:98:bf:87:c6:bb:3e:
34:b8:70:b0:56:68:30:bb:d7:cb:3b:f5:2c:6f:fd:cd:3d:6c:
5d:0c:c9:d6:2a:7b:78:5e:57:0c:eb:e7:d1:4f:44:41:f2:cc:
6e:76:b0:75:c8:ee:9e:95:19:2e:47:9e:ca:78:5d:90:73:14:
b6:db:21:5c:3c:dc:7a:23:22:36:fa:dd:1d:a5:9c:be:6c:80:
da:06:d1:cc:99:ad:76:55:06:cd:8c:e1:0c:5b:bf:e8:b3:5e:
f1:e4:ad:36:a6:34:6d:bd:ac:c7:84:18:ff:34:af:e0:f2:b7:
9a:c8:06:c6:e6:27:84:b5:3d:3c:94:12:0e:e7:24:27:f1:83:
a8:89:61:4f:f1:cd:13:89:43:54:38:e5:62:2c:b8:bd:ed:52:
c0:81:f9:d1:7a:79:bd:b6:bd:f4:c8:f7:d4:4f:5a:22:77:2a:
0f:d5:1b:4a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgIDAIGCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgyOTEzNTcwNloXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREREQTcxMTAvBgNVBAUTKDZFM0Y2QTRDQkQyQzc2NTFCNDkwRUI2
NDkwNEJCRkYxRjQ2MjAxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/iVPeP1L3+TbMHmqo9m+qZOu20IccUhgQ58Fyua0lbmaLeVoeMd5ApIcM1B00
hS9lO5ebpXQCQi9P7pjkRxc2wwUSR3EXPtOIT8KOLeIfSr1jRL3qt2alK2KmBzSg
yQaYfX8jIVW6JdLpDXYgyyibiKZcNsRTP9+18YFbhnLHUQHJIghRK2YzhKiJqMlT
bXT8Ty/xb8kT5Ah8GfeZO+Rkl3C8H4/i3jWYNuGxEjKGXweJ8VqnChWaUljlQRta
QsfTsdik54RXi8WPk/VsyObERbCdxn1iVTSzA2wO6yXin+VYp730mi6PQ35vVYcL
2kbTFeYyuizG1r562avfDLw/AgMBAAGjggLyMIIC7jAdBgNVHQ4EFgQUbj9qTL0s
dlG0kOtkkEu/8fRiAdUwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUREREE3LzNDOTUzMTlDOEQ1NDExRUI5ODQwRTA1RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERERBNy8zQzk1MzE5QzhENTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEww
c2RsRzBrT3Rra0V1XzhmUmlBZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzAN
MAsEAgABMAUDAwCUtjANBgkqhkiG9w0BAQsFAAOCAQEAOaKXvaA40le7qrUXJ9Dx
zVTJDsn7b9FrKAPfiwiIeDsde/IYRuRtXKmuiZSMagUcehTKUoZNGDdIsouQkhXv
sKuYP+jYn5dm1e3m31CbWATqHGf8mL+Hxrs+NLhwsFZoMLvXyzv1LG/9zT1sXQzJ
1ip7eF5XDOvn0U9EQfLMbnawdcjunpUZLkeeynhdkHMUttshXDzceiMiNvrdHaWc
vmyA2gbRzJmtdlUGzYzhDFu/6LNe8eStNqY0bb2sx4QY/zSv4PK3msgGxuYnhLU9
PJQSDuckJ/GDqIlhT/HNE4lDVDjlYiy4ve1SwIH50Xp5vba99Mj31E9aIncqD9Ub
Sg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:18 2026 by rpki-client