Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer
File: cgqmbzbBRgrUvDrGkvlltxdKWOA.cer (raw, json)
Hash identifier: FOjIYtqm0YhiWbgKBBBJ6oIHDWhCM5uk2xUQ1NpG6/c=
Subject key identifier: 72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C6D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jun 2026 14:22:43 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.64.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31853 (0x7c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 4 14:22:43 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91B4053, serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:bf:b6:3a:5e:62:7a:31:13:d6:43:35:69:
23:73:0a:7e:43:c5:a9:c8:1f:b0:91:aa:43:10:54:
83:b7:c4:cf:ff:28:86:4f:41:92:11:95:84:ec:04:
f7:be:a2:46:bd:c7:38:50:a1:d7:73:86:f8:9b:5a:
53:c7:c0:36:2b:a2:a1:bf:10:72:99:50:f2:30:9c:
ea:b0:7f:c5:1c:af:3b:6a:78:ec:d4:7e:c6:46:3a:
ca:7d:d5:0e:31:de:9a:fa:33:e1:ae:d9:ba:8d:0c:
5b:bc:a8:f3:8c:1f:f2:ce:2b:8b:02:ac:a8:4e:12:
f3:e0:6b:fe:07:ad:72:a4:13:45:96:6c:bf:19:e2:
8e:a3:2a:05:b6:32:82:0d:94:f8:cc:0f:41:7a:24:
22:30:b6:97:b1:e4:84:1f:4f:89:62:b5:56:d2:54:
09:f3:47:8b:75:ca:7c:ee:35:b3:56:6f:fb:ee:16:
27:42:94:91:6e:79:d9:39:1a:53:ea:cc:9b:16:ad:
58:b7:3a:9c:b6:4b:94:f0:fb:59:3a:25:8e:85:a8:
70:e7:94:95:ac:e9:8e:52:31:cd:27:19:db:91:d0:
b5:f7:e4:6b:1f:09:68:e4:e4:27:df:d6:da:2a:34:
88:80:bb:f3:41:28:ff:f4:f2:d7:e9:17:c6:b2:f0:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.64.0/23
Signature Algorithm: sha256WithRSAEncryption
17:6f:31:08:53:8b:ee:61:56:1d:37:27:7f:9e:8b:d9:ef:9e:
85:83:f4:ce:e9:82:63:fa:5b:31:53:61:0b:5b:f2:e2:3b:49:
5f:71:35:6a:79:1b:be:86:bf:28:89:4a:7e:5c:ac:58:fd:44:
c4:84:0c:d9:b5:7f:fa:82:57:5a:f5:2a:62:5e:50:09:88:9d:
a6:6c:36:b8:aa:19:e5:b9:ec:76:cb:21:2b:af:18:fc:f0:2d:
51:0b:f6:89:7d:2a:86:4f:ea:04:00:7c:4e:5b:55:09:26:a9:
0b:84:b9:34:38:e8:05:b7:52:84:26:bc:a0:89:3d:9f:2e:61:
f7:12:ff:eb:cc:86:93:d6:43:5c:51:37:7a:e1:72:40:74:26:
3f:08:c1:69:26:08:14:78:af:95:22:10:b6:49:83:7f:46:f2:
9e:86:8c:85:21:d8:8b:61:ff:e8:c6:27:bc:00:be:d2:8c:24:
49:5a:e1:0b:61:fb:c8:7e:e0:7f:09:57:df:f8:7d:d1:88:98:
27:a2:b2:89:30:91:a6:ea:b8:e9:2b:cc:2e:2a:b3:9a:60:f6:
e4:1b:1d:7b:f5:1a:25:d7:2d:7d:a3:10:16:1e:b5:b8:b5:b6:
9d:da:aa:55:dc:b9:13:27:9d:99:f2:09:0e:59:cb:9e:30:dd:
21:8d:0a:41
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjA0MTQyMjQzWhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCNDA1MzExMC8GA1UEBRMoNzIwQUE2NkYzNkMxNDYwQUQ0QkMzQUM2
OTJGOTY1QjcxNzRBNThFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOXtv7Y6XmJ6MRPWQzVpI3MKfkPFqcgfsJGqQxBUg7fEz/8ohk9BkhGVhOwE976i
Rr3HOFCh13OG+JtaU8fANiuiob8QcplQ8jCc6rB/xRyvO2p47NR+xkY6yn3VDjHe
mvoz4a7Zuo0MW7yo84wf8s4riwKsqE4S8+Br/getcqQTRZZsvxnijqMqBbYygg2U
+MwPQXokIjC2l7HkhB9PiWK1VtJUCfNHi3XKfO41s1Zv++4WJ0KUkW552TkaU+rM
mxatWLc6nLZLlPD7WToljoWocOeUlazpjlIxzScZ25HQtffkax8JaOTkJ9/W2io0
iIC780Eo//Ty1+kXxrLwfiUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRyCqZvNsFG
CtS8OsaS+WW3F0pY4DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjQwNTMvMzY0MENCOTQ1MEUxMTFGMDkxQzRCQjc0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI0MDUzLzM2NDBDQjk0NTBFMTExRjA5MUM0QkI3NEM0RjlBRTAyL2NncW1iemJC
UmdyVXZEckdrdmxsdHhkS1dPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVlQDANBgkqhkiG9w0BAQsFAAOCAQEAF28xCFOL7mFWHTcnf56L
2e+ehYP0zumCY/pbMVNhC1vy4jtJX3E1ankbvoa/KIlKflysWP1ExIQM2bV/+oJX
WvUqYl5QCYidpmw2uKoZ5bnsdsshK68Y/PAtUQv2iX0qhk/qBAB8TltVCSapC4S5
NDjoBbdShCa8oIk9ny5h9xL/68yGk9ZDXFE3euFyQHQmPwjBaSYIFHivlSIQtkmD
f0bynoaMhSHYi2H/6MYnvAC+0owkSVrhC2H7yH7gfwlX3/h90YiYJ6KyiTCRpuq4
6SvMLiqzmmD25Bsde/UaJdctfaMQFh61uLW2ndqqVdy5EyedmfIJDlnLnjDdIY0K
QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:25 2026 by rpki-client