
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
File: h_pIRIna7X3O5mDHjYe6LMGtqmI.cer (raw, json)
Hash identifier: l8P2XAPwz31PyBRlZ/0323oq3kpGR7qKkVbNy59FpGo=
Subject key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 810D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 20 Aug 2026 14:07:53 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.88.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33037 (0x810d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 20 14:07:53 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:22:cd:f8:2a:f2:6a:25:97:b5:d3:e1:6a:
7d:49:f5:5f:ce:e3:27:c1:01:07:ac:18:8d:eb:c1:
84:3a:4f:55:1c:65:fc:df:4d:13:99:9d:ee:9a:b6:
a2:5c:e4:bf:94:2f:96:50:78:ff:81:34:9b:2d:5d:
8c:d3:f5:e2:2d:5d:f0:8a:c7:d1:03:98:4f:65:18:
23:c5:3a:bf:a9:eb:b0:ae:91:b9:f0:fa:0f:cf:2f:
e5:cb:b8:d2:e9:a2:9a:1a:98:1e:d8:9c:de:53:86:
2f:45:09:82:4e:a5:c8:b9:c9:12:d8:dd:1d:42:22:
e1:97:59:5d:98:af:f3:d0:b9:ac:7b:1f:3b:0a:02:
71:45:40:39:79:ec:8a:09:30:9d:3c:04:86:36:50:
db:0a:a0:8e:33:69:29:0b:0a:98:a8:58:94:55:19:
d5:cc:fd:1c:2b:d9:14:bd:1b:ac:cc:f1:24:16:90:
d2:46:9a:d1:85:ff:f0:71:cc:3b:e8:15:d0:98:b4:
3c:99:f2:f7:b0:04:b4:2f:a5:23:9b:0d:59:ad:b9:
d2:57:25:f4:0c:5c:4c:6f:5e:21:f0:2b:e9:f3:45:
ee:ee:2c:88:fb:35:b8:b8:26:af:80:79:7e:f4:6a:
ef:03:fd:c8:f8:59:40:67:28:65:80:88:7e:c4:2d:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.88.0/23
Signature Algorithm: sha256WithRSAEncryption
47:fa:4e:53:e6:0a:7a:78:ce:cf:d9:cd:65:65:71:ee:61:43:
38:bc:ab:d9:62:8a:4c:f4:50:31:de:95:47:63:2d:33:3a:5d:
83:4e:24:65:18:66:2c:61:6b:e2:da:ca:83:a5:96:54:54:c0:
7a:39:58:25:51:da:6e:64:25:2d:2a:7e:47:30:b7:08:17:f1:
7b:0a:4a:05:13:ad:7e:94:f4:2e:bf:07:82:aa:5e:15:59:bb:
39:0b:0a:b3:63:01:67:4f:93:d9:2d:49:08:fc:e9:99:2a:c9:
2d:b8:98:ad:5f:34:1c:72:77:d6:5f:b7:68:53:70:36:19:9d:
02:c7:ce:b5:76:b0:77:04:c9:9f:b8:e4:f1:68:71:d8:25:57:
ca:a6:af:3f:e3:0d:f2:f3:dc:46:0c:61:b7:25:38:5a:77:df:
57:fb:3d:89:82:e6:4c:1b:fc:f6:91:56:3c:f2:91:46:a1:c3:
fe:07:f2:52:ea:29:a2:15:d1:ff:6e:8a:b6:81:01:a7:fa:a6:
68:bf:8e:e5:3e:57:ca:93:2d:1b:7e:e2:ca:3a:33:82:f6:35:
e5:ac:ad:0b:7d:61:d8:65:c7:7e:10:3f:b9:9e:c1:d2:53:ee:
6e:72:7c:c6:89:ad:76:7e:05:c6:c2:2a:d4:c2:de:bd:6c:fe:
6e:3f:c8:41
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIENMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgyMDE0MDc1M1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjE5NjIxMTAvBgNVBAUTKDg3RkE0ODQ0ODlEQUVEN0RDRUU2NjBD
NzhEODdCQTJDQzFBREFBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzQCLN+CryaiWXtdPhan1J9V/O4yfBAQesGI3rwYQ6T1UcZfzfTROZne6atqJc
5L+UL5ZQeP+BNJstXYzT9eItXfCKx9EDmE9lGCPFOr+p67Cukbnw+g/PL+XLuNLp
opoamB7YnN5Thi9FCYJOpci5yRLY3R1CIuGXWV2Yr/PQuax7HzsKAnFFQDl57IoJ
MJ08BIY2UNsKoI4zaSkLCpioWJRVGdXM/Rwr2RS9G6zM8SQWkNJGmtGF//BxzDvo
FdCYtDyZ8vewBLQvpSObDVmtudJXJfQMXExvXiHwK+nzRe7uLIj7Nbi4Jq+AeX70
au8D/cj4WUBnKGWAiH7ELfn3AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUh/pIRIna
7X3O5mDHjYe6LMGtqmIwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYxOTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGMTk2Mi9BRUJDMDhGQTM3MTMxMUYwQUIwRDlFNEVDNEY5QUUwMi9oX3BJUklu
YTdYM081bURIalllNkxNR3RxbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGlY1gwDQYJKoZIhvcNAQELBQADggEBAEf6TlPmCnp4zs/ZzWVl
ce5hQzi8q9liikz0UDHelUdjLTM6XYNOJGUYZixha+LayoOlllRUwHo5WCVR2m5k
JS0qfkcwtwgX8XsKSgUTrX6U9C6/B4KqXhVZuzkLCrNjAWdPk9ktSQj86ZkqyS24
mK1fNBxyd9Zft2hTcDYZnQLHzrV2sHcEyZ+45PFocdglV8qmrz/jDfLz3EYMYbcl
OFp331f7PYmC5kwb/PaRVjzykUahw/4H8lLqKaIV0f9uiraBAaf6pmi/juU+V8qT
LRt+4so6M4L2NeWsrQt9Ydhlx34QP7mewdJT7m5yfMaJrXZ+BcbCKtTC3r1s/m4/
yEE=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:11:04 2026 by rpki-client