Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
File: mP6mxE_1MoSDXoHQcN_BggttUOk.cer (raw, json)
Hash identifier: tsDfc5pfsXqLyXEyiH4yBK6OPW6eeUnM8MMTrGi2FoM=
Subject key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:53:29 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 66.235.120.0/21
IP: 144.249.224.0/20
IP: 158.120.80.0/21
IP: 170.10.68.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30166 (0x75d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:53:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A912F6E3, serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:e4:0b:cd:ab:a9:97:e0:e8:50:bd:7f:2f:
91:2d:1b:93:a8:33:2b:34:e9:b6:c4:29:2e:e7:cd:
d7:2e:bb:a7:8e:66:49:bf:45:d7:2e:3e:4c:97:1e:
9c:02:e7:58:cd:b5:88:08:25:d4:a2:a1:a1:aa:47:
03:06:c1:bc:ba:5c:3c:9e:26:93:47:8f:8e:16:ab:
b6:35:f4:ec:c5:32:3d:0d:fa:0a:b4:b7:be:9d:b3:
c6:99:ca:6d:50:d8:bb:b5:85:39:c2:e5:4d:34:d9:
bf:97:68:6c:5f:b2:8d:58:b2:e0:a4:8f:0e:7c:21:
b3:e4:16:45:17:a6:6a:49:99:e4:36:a4:09:d0:97:
34:6b:18:8d:1c:9b:df:3c:cd:80:b3:c7:71:c2:c3:
b8:95:c3:8b:3d:9a:28:81:a4:24:49:42:b2:96:58:
66:00:3e:4b:06:20:61:d9:e9:4b:a3:40:b9:f5:b2:
15:2c:ed:0b:f3:d8:ec:8e:2a:a1:49:7a:05:14:27:
6f:a2:3b:14:83:7a:67:34:e0:47:24:f8:5d:dd:6a:
82:df:e7:a3:26:0f:25:17:f1:c8:27:17:00:fa:1e:
19:6b:d5:59:38:8f:e7:c8:42:23:c1:03:35:d5:ec:
6e:9d:b1:55:68:1b:a3:6c:0a:be:b7:23:55:bd:66:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.235.120.0/21
144.249.224.0/20
158.120.80.0/21
170.10.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:51:89:26:b1:71:8d:74:70:3c:71:ac:08:42:c5:64:ca:28:
5a:23:86:4d:a0:c1:94:fa:e8:e8:f6:40:e1:1d:16:e7:fa:8a:
56:cd:50:43:6d:1d:06:3e:ab:b5:64:f0:06:e5:13:48:72:5d:
63:1d:b9:d3:cd:a3:03:39:a6:2a:c6:dc:aa:37:5c:1d:bf:84:
e2:cc:79:e6:da:96:6d:8a:a3:ab:d1:6e:4a:41:ae:f1:34:14:
b6:c1:bf:dd:b9:bc:65:72:bf:71:c0:c2:b2:52:cf:5a:69:18:
c9:81:d7:64:54:41:86:bd:82:a7:26:00:77:c3:e9:ec:bd:df:
70:a3:f4:64:99:e5:16:d6:f9:27:f3:4a:90:23:66:91:fa:b2:
be:60:be:61:e2:ce:f6:a2:a7:64:47:11:67:0d:6c:a7:76:7f:
8f:a4:ec:4f:26:ba:01:77:96:1e:eb:c4:5c:0a:03:80:88:85:
ba:d4:3c:7d:7f:1c:79:59:24:12:26:8a:d5:a5:04:b3:8a:41:
cc:68:3d:64:7f:59:a3:32:93:36:e4:75:cc:fb:66:d5:c3:58:
f0:40:b9:4a:64:33:f3:35:78:62:a6:0f:34:69:d1:99:bf:92:
b5:73:3d:11:70:ad:dc:e7:8b:d3:aa:a2:86:7f:d5:08:de:91:
6d:09:d4:7a
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgICddYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MzI5WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyRjZFMzExMC8GA1UEBRMoOThGRUE2QzQ0RkY1MzI4NDgzNUU4MUQw
NzBERkMxODIwQjZENTBFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKtP5AvNq6mX4OhQvX8vkS0bk6gzKzTptsQpLufN1y67p45mSb9F1y4+TJcenALn
WM21iAgl1KKhoapHAwbBvLpcPJ4mk0ePjhartjX07MUyPQ36CrS3vp2zxpnKbVDY
u7WFOcLlTTTZv5dobF+yjViy4KSPDnwhs+QWRRemakmZ5DakCdCXNGsYjRyb3zzN
gLPHccLDuJXDiz2aKIGkJElCspZYZgA+SwYgYdnpS6NAufWyFSztC/PY7I4qoUl6
BRQnb6I7FIN6ZzTgRyT4Xd1qgt/noyYPJRfxyCcXAPoeGWvVWTiP58hCI8EDNdXs
bp2xVWgbo2wKvrcjVb1mtS0CAwEAAaOCAwUwggMBMB0GA1UdDgQWBBSY/qbET/Uy
hINegdBw38GCC21Q6TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY2RTMvRUE1MzgxREVCNUREMTFFRjk3RDlGQTM0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJGNkUzL0VBNTM4MURFQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8x
TW9TRFhvSFFjTl9CZ2d0dFVPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQiMCAw
HgQCAAEwGAMEA0LreAMEBJD54AMEA554UAMEAqoKRDANBgkqhkiG9w0BAQsFAAOC
AQEAi1GJJrFxjXRwPHGsCELFZMooWiOGTaDBlPro6PZA4R0W5/qKVs1QQ20dBj6r
tWTwBuUTSHJdYx25082jAzmmKsbcqjdcHb+E4sx55tqWbYqjq9FuSkGu8TQUtsG/
3bm8ZXK/ccDCslLPWmkYyYHXZFRBhr2CpyYAd8Pp7L3fcKP0ZJnlFtb5J/NKkCNm
kfqyvmC+YeLO9qKnZEcRZw1sp3Z/j6TsTya6AXeWHuvEXAoDgIiFutQ8fX8ceVkk
EiaK1aUEs4pBzGg9ZH9ZozKTNuR1zPtm1cNY8EC5SmQz8zV4YqYPNGnRmb+StXM9
EXCt3OeL06qihn/VCN6RbQnUeg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:11 2026 by rpki-client