Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer (raw, json)
Hash identifier: GhRkyYQwyTFBlUnBVIey2aPVYdeSUU3WZ90wpvRzuTg=
Subject key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78B4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Mar 2026 00:45:25 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 143.192.112.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30900 (0x78b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 19 00:45:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ee:ce:87:57:7b:e4:05:84:c9:e7:f6:4b:99:
11:8f:cb:49:e2:3a:9c:18:1d:4a:7a:9f:c1:8e:da:
a6:83:7c:2b:3a:ba:60:a9:6d:5f:59:d9:ea:9b:8d:
31:4f:f7:6c:7c:9d:9b:84:26:be:8e:e1:a8:68:6c:
a5:8d:d5:6d:de:c4:7d:2f:cb:fb:a6:2c:ff:c3:bb:
5b:2c:dc:6a:93:9a:02:fb:4c:6b:42:a6:c0:99:23:
05:f9:82:ad:dc:ce:31:95:cf:f9:ed:f7:b0:5d:c7:
14:43:8e:b4:a5:9f:60:22:56:19:d8:e6:e3:c0:d4:
90:6c:4c:91:a8:f8:79:2a:27:a2:ad:11:f8:2e:b1:
9d:5b:24:19:2f:39:e6:e2:bc:3c:2e:d7:4e:26:a9:
1f:52:d3:7f:b9:98:9d:5b:cd:b8:8e:a9:f4:8f:53:
e7:87:c8:15:49:51:f0:42:bb:34:84:c7:63:31:54:
3d:c0:f3:2b:8d:f0:e5:ab:c9:36:16:5b:68:1e:11:
08:f6:70:0e:60:4f:79:2a:4e:da:f1:cf:01:6e:c0:
3c:60:35:23:10:a5:57:32:bc:b5:97:7c:20:aa:1f:
3b:08:35:0c:45:25:83:cd:f1:b7:73:96:c2:b6:47:
da:7d:a4:1a:01:7b:c0:41:c0:3f:2b:9b:24:b2:49:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.192.112.0/20
Signature Algorithm: sha256WithRSAEncryption
06:5e:92:b5:f8:f0:3a:37:50:63:23:92:47:bf:dc:bd:16:98:
a7:5f:c2:7a:78:57:49:50:0d:12:dd:4e:07:c8:6f:0a:67:3b:
e5:52:e1:74:22:14:84:f4:5e:7a:a1:c9:2e:2e:0d:f1:c5:14:
8e:cf:1a:fa:8b:60:51:c3:b1:d9:d6:70:ed:9b:37:d3:bf:00:
e4:eb:49:d6:2b:55:4d:77:71:9a:96:bb:c8:30:f3:ce:3e:96:
9b:be:05:d5:7b:62:61:fe:bf:a1:e1:70:e8:97:df:05:b3:64:
93:05:dc:24:27:26:40:51:d8:f1:66:55:c4:7f:8f:0c:2b:6f:
76:30:ad:4f:c5:35:ec:7a:bf:c1:bb:2d:cc:a1:11:0e:39:39:
db:ff:93:df:f9:19:e9:0a:bb:be:d5:a4:b1:25:32:a9:a6:1b:
a5:e3:63:d3:84:d3:0d:2f:93:ad:f3:01:27:07:ed:b4:7e:13:
34:a2:69:95:3c:79:f0:e9:e9:64:14:bc:d2:fa:82:72:27:f4:
58:cf:a8:d3:c4:16:c1:20:91:38:1e:f5:87:f7:7a:8f:82:7d:
09:3d:3e:3b:ce:9e:c4:f7:95:7b:71:e5:0b:12:44:dc:a3:44:
a1:ab:5d:f2:60:dc:d0:ab:29:9b:cf:23:3f:17:44:37:61:a0:
b5:6a:88:77
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMzE5MDA0NTI1WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFEMkExMDExMC8GA1UEBRMoRERBRUFBNTM0MDJCNzBBOTRGNzM3QzFC
MEQ1RDk1MDFGODI5RjAzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AIjuzodXe+QFhMnn9kuZEY/LSeI6nBgdSnqfwY7apoN8Kzq6YKltX1nZ6puNMU/3
bHydm4Qmvo7hqGhspY3Vbd7EfS/L+6Ys/8O7WyzcapOaAvtMa0KmwJkjBfmCrdzO
MZXP+e33sF3HFEOOtKWfYCJWGdjm48DUkGxMkaj4eSonoq0R+C6xnVskGS855uK8
PC7XTiapH1LTf7mYnVvNuI6p9I9T54fIFUlR8EK7NITHYzFUPcDzK43w5avJNhZb
aB4RCPZwDmBPeSpO2vHPAW7APGA1IxClVzK8tZd8IKofOwg1DEUlg83xt3OWwrZH
2n2kGgF7wEHAPyubJLJJusMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTdrqpTQCtw
qU9zfBsNXZUB+CnwOTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDJBMTAvRTgzMzI1RUEyMzJDMTFGMTkzQTREODMyQTM4MzM3NzMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQyQTEwL0U4MzMyNUVBMjMyQzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFy
Y0tsUGMzd2JEVjJWQWZncDhEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBI/AcDANBgkqhkiG9w0BAQsFAAOCAQEABl6StfjwOjdQYyOSR7/c
vRaYp1/CenhXSVANEt1OB8hvCmc75VLhdCIUhPReeqHJLi4N8cUUjs8a+otgUcOx
2dZw7Zs3078A5OtJ1itVTXdxmpa7yDDzzj6Wm74F1XtiYf6/oeFw6JffBbNkkwXc
JCcmQFHY8WZVxH+PDCtvdjCtT8U17Hq/wbstzKERDjk52/+T3/kZ6Qq7vtWksSUy
qaYbpeNj04TTDS+TrfMBJwfttH4TNKJplTx58OnpZBS80vqCcif0WM+o08QWwSCR
OB71h/d6j4J9CT0+O86exPeVe3HlCxJE3KNEoatd8mDc0Kspm88jPxdEN2GgtWqI
dw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:33:25 2026 by rpki-client