Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.cer (raw, json)
Hash identifier: viiDXiXVVC9td+vBiv/YDjy1lpTY8b7Zm4bHuNdcgRo=
Subject key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7EB3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Jul 2026 14:42:38 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 155.205.0.0/16
IP: 198.51.211.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32435 (0x7eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 13 14:42:38 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:11:90:2c:e7:f3:63:55:df:ce:c5:a4:13:
de:36:27:3c:c8:a3:35:8c:f6:f2:b2:ba:4d:a0:94:
a9:31:79:92:2e:71:f7:01:41:be:15:2b:09:4f:89:
b9:90:d1:51:10:06:74:6f:9c:81:7e:5f:87:2a:e9:
13:61:ee:12:34:53:71:76:ac:82:32:6c:19:59:c5:
8b:df:02:a2:f5:b5:68:81:f3:37:b9:14:b1:ab:00:
51:38:61:e1:cb:c8:54:a5:19:b3:e9:e5:1d:78:8b:
e2:66:0e:d4:a5:c7:1b:5b:91:6c:72:b3:df:3e:62:
9d:78:07:b6:8d:5b:ae:4f:3b:d4:0a:b3:da:77:02:
8b:f2:ca:51:aa:49:a7:cc:5b:90:90:11:aa:2d:51:
1a:9b:ec:3f:d9:8a:ef:9c:e7:84:cf:4e:2e:7c:c2:
e8:50:2d:62:9e:ce:c1:c4:d4:a6:5f:0a:c1:03:4b:
f3:a3:83:0a:a7:33:7b:2e:6b:95:1f:7c:f1:0b:92:
a8:37:08:02:c6:e4:dd:95:c4:3f:e7:1d:78:3a:13:
48:9e:29:f5:c5:38:1f:4c:65:4b:ac:30:2f:36:bf:
95:b7:ef:69:52:22:29:eb:b0:05:2d:f5:1a:d7:8e:
ca:80:aa:cd:92:37:13:0e:0a:53:10:86:bf:96:df:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.205.0.0/16
198.51.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5f:79:5b:55:98:84:dd:64:9a:e1:b6:96:bd:40:8e:94:a1:
c0:c5:f6:4b:8e:00:b9:c1:8a:07:91:5d:91:12:24:10:66:5e:
0b:a1:6e:7f:49:c5:f0:d9:a6:b4:68:71:62:bb:fd:e9:03:81:
57:14:b6:f2:d2:e8:16:3b:3b:d9:03:2e:3b:fd:5e:20:91:89:
dc:92:47:4f:58:25:94:66:e1:5f:75:7d:b6:88:84:93:31:72:
ac:d5:ad:73:d7:a0:36:f2:68:65:82:74:eb:00:d4:39:48:a7:
8c:6c:29:a6:c1:27:37:da:62:59:f4:68:66:0d:cd:b1:07:85:
dc:84:8a:a9:b5:ce:44:d3:43:86:5f:71:23:fe:ac:ad:8f:61:
3d:45:a2:d5:ab:86:b0:cd:d3:70:d6:34:01:f1:e2:5b:12:42:
30:05:d0:e4:86:df:07:8a:96:f1:e5:a0:4e:9f:eb:01:f5:f7:
5f:39:94:a0:7e:76:9a:fd:8b:e8:6f:e0:dd:0b:47:db:72:f9:
33:45:ad:f9:ea:7e:35:01:ef:d0:a6:07:87:9f:b0:60:57:ab:
0b:c9:e9:4d:2c:58:0d:a3:1b:ae:41:92:bd:5c:d2:29:05:cd:
71:1c:34:55:6a:36:0c:14:85:bd:1f:fa:50:3c:ad:1a:5e:9e:
c5:c9:ff:88
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICfrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzEzMTQ0MjM4WhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGODlDMTExMC8GA1UEBRMoRDhDMUNDOEE0NjNBMzE1MENCRUMwODY1
NEU2MTc4MDBENjZFNTNFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALq/EZAs5/NjVd/OxaQT3jYnPMijNYz28rK6TaCUqTF5ki5x9wFBvhUrCU+JuZDR
URAGdG+cgX5fhyrpE2HuEjRTcXasgjJsGVnFi98CovW1aIHzN7kUsasAUThh4cvI
VKUZs+nlHXiL4mYO1KXHG1uRbHKz3z5inXgHto1brk871Aqz2ncCi/LKUapJp8xb
kJARqi1RGpvsP9mK75znhM9OLnzC6FAtYp7OwcTUpl8KwQNL86ODCqczey5rlR98
8QuSqDcIAsbk3ZXEP+cdeDoTSJ4p9cU4H0xlS6wwLza/lbfvaVIiKeuwBS31GteO
yoCqzZI3Ew4KUxCGv5bfLCkCAwEAAaOCAvgwggL0MB0GA1UdDgQWBBTYwcyKRjox
UMvsCGVOYXgA1m5T6TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5QzEvMEEzRjI2OUM4MDg2MTFFQkI0QzZEMTE2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY4OUMxLzBBM0YyNjlDODA4NjExRUJCNEM2RDExNkM0RjlBRTAyLzJNSE1pa1k2
TVZETDdBaGxUbUY0QU5adVUtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw
EQQCAAEwCwMDAJvNAwQAxjPTMA0GCSqGSIb3DQEBCwUAA4IBAQC2X3lbVZiE3WSa
4baWvUCOlKHAxfZLjgC5wYoHkV2REiQQZl4LoW5/ScXw2aa0aHFiu/3pA4FXFLby
0ugWOzvZAy47/V4gkYnckkdPWCWUZuFfdX22iISTMXKs1a1z16A28mhlgnTrANQ5
SKeMbCmmwSc32mJZ9GhmDc2xB4XchIqptc5E00OGX3Ej/qytj2E9RaLVq4awzdNw
1jQB8eJbEkIwBdDkht8Hipbx5aBOn+sB9fdfOZSgfnaa/Yvob+DdC0fbcvkzRa35
6n41Ae/QpgeHn7BgV6sLyelNLFgNoxuuQZK9XNIpBc1xHDRVajYMFIW9H/pQPK0a
Xp7Fyf+I
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:04 2026 by rpki-client