Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer (raw, json)
Hash identifier: Q8xdJVjrx3+sSGLB9U3wZV+0dmCmjK3EMsKjZHKSQgE=
Subject key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80EC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 14:13:57 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.213.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33004 (0x80ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 18 14:13:57 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:93:34:dd:d3:6e:f7:ef:bd:4b:4b:fb:45:
80:ac:a0:ed:a5:4f:17:fd:a3:c6:57:82:83:8c:40:
dd:25:eb:8f:bb:ad:84:2d:d0:3b:ae:3d:8b:11:63:
f2:1c:a5:bb:77:0a:86:14:db:d3:c9:d3:67:5c:44:
3d:bb:0c:35:ac:d5:44:c8:08:c6:d9:f8:03:59:b7:
ac:71:bb:ff:d7:88:2d:1b:67:92:15:fd:a4:9b:85:
10:59:4f:f1:d0:87:79:18:32:7f:46:dc:9d:5b:4e:
0f:4b:0f:a5:69:12:a5:9b:58:3a:4b:f3:6f:5b:a1:
1b:5c:ba:f1:f6:55:b3:3b:cc:73:23:60:95:25:27:
15:51:13:44:9b:d6:ce:e5:99:20:4d:d1:f8:a9:62:
51:fc:8d:fe:8c:6c:74:0e:e9:92:3b:2f:a2:72:33:
2e:70:67:b9:4f:ad:43:dc:dd:07:26:b2:af:75:fd:
38:15:47:19:ce:9a:30:42:03:26:46:e0:90:b4:cf:
07:70:dd:50:85:fd:59:d5:77:c4:2e:a4:26:9f:14:
4d:17:d0:d5:10:c1:d8:f1:8b:66:9c:cc:99:97:c0:
72:2a:a8:01:e4:e4:95:09:46:66:28:0c:a3:b6:2c:
96:a2:7c:8c:ad:a5:b2:7a:c5:b5:6f:e6:9a:5e:1a:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.213.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3d:17:d6:a1:e8:37:b4:03:44:5b:28:6e:dc:ec:cf:52:91:
e7:ef:70:54:61:f6:ab:cd:a2:c6:29:df:9c:d0:17:b1:a0:c6:
b7:1b:76:bc:4e:4c:3f:57:aa:8b:01:b8:26:6c:fa:f6:2a:6b:
62:a7:81:cd:d5:2a:97:18:e0:a9:05:42:4c:a5:1c:6b:d7:8d:
60:52:b2:76:86:cf:73:e1:82:12:ca:75:5a:18:e4:3c:be:fc:
27:e6:5d:1f:05:7a:d1:96:17:ed:01:f5:1c:ee:fa:e6:d7:8c:
5d:3d:0a:87:09:4c:dd:06:dc:27:fa:24:56:ac:a6:31:82:5e:
63:cc:ad:fb:76:3e:57:05:db:35:cb:76:0e:c9:94:79:e0:a4:
1a:60:9f:ce:fc:b5:aa:c4:09:45:b3:ed:04:51:b7:aa:01:0b:
b8:46:48:79:ab:fe:2d:f9:fd:73:8d:20:8b:3a:8d:07:92:07:
5c:bf:71:dc:52:96:5e:8d:0b:7d:37:6b:8e:9b:76:48:5c:e9:
5c:78:34:94:58:31:8d:ba:61:d8:0c:8a:43:56:91:5c:4b:76:
b4:a8:53:e8:35:76:cf:d2:73:81:ae:05:a6:a1:83:c9:ff:ed:
6b:f3:96:1f:a6:61:a6:34:a8:1f:36:f6:31:f0:9f:bd:be:34:
1d:88:5e:fe
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIDsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgxODE0MTM1N1oXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2
NEJFNTFEMEI2QUUwOUVCOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCijpM03dNu9++9S0v7RYCsoO2lTxf9o8ZXgoOMQN0l64+7rYQt0DuuPYsRY/Ic
pbt3CoYU29PJ02dcRD27DDWs1UTICMbZ+ANZt6xxu//XiC0bZ5IV/aSbhRBZT/HQ
h3kYMn9G3J1bTg9LD6VpEqWbWDpL829boRtcuvH2VbM7zHMjYJUlJxVRE0Sb1s7l
mSBN0fipYlH8jf6MbHQO6ZI7L6JyMy5wZ7lPrUPc3Qcmsq91/TgVRxnOmjBCAyZG
4JC0zwdw3VCF/VnVd8QupCafFE0X0NUQwdjxi2aczJmXwHIqqAHk5JUJRmYoDKO2
LJaifIytpbJ6xbVv5ppeGuHxAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUwnrh0WRy
n0PZ4PpkvlHQtq4J65kwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUREMUY5LzQwMkVEMjcyNEFDRjExRUZCODIxOEUxNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdS
eW4wUFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACgGdUwDQYJKoZIhvcNAQELBQADggEBAKs9F9ah6De0A0RbKG7c
7M9SkefvcFRh9qvNosYp35zQF7GgxrcbdrxOTD9XqosBuCZs+vYqa2Kngc3VKpcY
4KkFQkylHGvXjWBSsnaGz3PhghLKdVoY5Dy+/CfmXR8FetGWF+0B9Rzu+ubXjF09
CocJTN0G3Cf6JFaspjGCXmPMrft2PlcF2zXLdg7JlHngpBpgn878tarECUWz7QRR
t6oBC7hGSHmr/i35/XONIIs6jQeSB1y/cdxSll6NC303a46bdkhc6Vx4NJRYMY26
YdgMikNWkVxLdrSoU+g1ds/Sc4GuBaahg8n/7Wvzlh+mYaY0qB829jHwn72+NB2I
Xv4=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:08:21 2026 by rpki-client