Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.cer (raw, json)
Hash identifier: 5sGYNXfdXk2YxxCbU7JPxfkTHYUIX5PQocwzOjFY6zc=
Subject key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8173
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Aug 2026 13:40:47 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.214.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33139 (0x8173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 28 13:40:47 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:9b:b4:35:0c:8f:c2:07:5c:0f:21:1e:03:
63:79:91:d3:8d:13:ed:5c:95:02:89:7f:ba:8b:a4:
63:ce:01:0a:3e:30:11:4f:f3:ef:6b:ab:67:e9:53:
23:86:62:71:29:04:d7:da:2e:9e:91:12:f9:c8:e1:
34:45:50:25:21:63:ad:c9:d2:10:76:e5:c2:4c:1c:
28:28:8f:13:1c:c1:bd:9d:02:8d:1e:30:b4:3f:f1:
d5:0b:49:47:a9:2f:35:b5:ad:f5:1b:7e:de:bc:4b:
ec:dd:6a:67:1f:50:40:9d:d4:24:bd:a3:51:ca:6a:
c0:71:7e:00:eb:99:3e:91:44:32:76:74:d4:69:fc:
aa:b0:1e:b6:97:d2:a3:4d:5a:13:b6:51:84:fc:6f:
80:43:0b:86:19:5e:41:c1:ce:11:02:eb:56:44:3b:
05:3c:36:8e:d7:84:70:32:8a:cd:b0:cc:b7:65:80:
30:8e:02:b5:54:f4:56:dd:8a:d9:e1:36:2c:7f:15:
cc:00:fe:2d:80:0d:b8:61:72:a1:7c:f7:7e:9e:40:
c6:15:9d:53:bb:49:15:71:48:62:52:74:69:7a:a3:
4e:3a:af:b5:8f:ec:ad:4e:ca:01:ef:0a:a9:99:35:
00:2e:1c:64:75:82:6d:f8:30:6f:c5:fc:8a:27:a3:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.214.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:69:d9:ca:50:49:0e:33:f5:e4:c3:37:81:1c:07:aa:69:61:
09:00:b3:9c:6c:74:1f:e9:ea:71:ba:b0:40:a5:ab:33:33:91:
f3:d5:b7:cf:99:8b:0e:67:68:69:1e:05:2a:f4:39:5e:b4:14:
3e:06:dd:8c:af:b8:f0:7b:18:d7:5a:ae:c8:6a:bd:0a:84:ae:
92:df:61:1b:42:00:67:18:af:cf:aa:7f:d7:f2:89:06:1d:c9:
80:47:f8:4c:63:f7:e4:8c:3e:57:ab:0f:4a:0f:9b:0b:8f:9c:
2b:37:cf:bd:d9:00:fb:f5:de:45:2e:af:c3:73:91:83:e7:ad:
4c:01:c1:7f:7b:c3:74:ef:8d:f3:76:de:62:32:73:0e:34:a1:
db:f2:c6:dc:fe:f7:8b:7d:f7:5a:a4:53:c9:92:0d:34:77:d8:
ff:94:39:1d:75:94:2f:08:d7:4e:a0:a2:4d:df:39:54:49:f5:
cd:75:2d:99:22:5b:fe:67:35:8c:d1:38:3f:7f:8e:36:ec:34:
8b:8b:f8:0f:19:17:82:b0:fe:cd:fd:e8:0d:c1:c9:da:81:d2:
67:2f:42:22:72:8f:36:15:41:5d:d7:f1:0e:08:8e:d8:09:dd:
c4:e2:d5:df:0c:9d:57:9e:73:b3:b6:fc:81:a8:92:c8:93:ea:
2b:23:0b:24
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIFzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgyODEzNDA0N1oXDTI3MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUNFMUQxMTAvBgNVBAUTKDM2NjIyRjk5MDBCNDZBQURGQ0QwNTQ2
NEYxMEQ0MkIxMzA2MjUxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCIpu0NQyPwgdcDyEeA2N5kdONE+1clQKJf7qLpGPOAQo+MBFP8+9rq2fpUyOG
YnEpBNfaLp6REvnI4TRFUCUhY63J0hB25cJMHCgojxMcwb2dAo0eMLQ/8dULSUep
LzW1rfUbft68S+zdamcfUECd1CS9o1HKasBxfgDrmT6RRDJ2dNRp/KqwHraX0qNN
WhO2UYT8b4BDC4YZXkHBzhEC61ZEOwU8No7XhHAyis2wzLdlgDCOArVU9Fbditnh
Nix/FcwA/i2ADbhhcqF8936eQMYVnVO7SRVxSGJSdGl6o046r7WP7K1OygHvCqmZ
NQAuHGR1gm34MG/F/Iono1DDAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUNmIvmQC0
aq380FRk8Q1CsTBiUXYwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlDRTFEL0I1NDhEQkUyNjJERjExRjBBMUUzN0UwRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5Q0UxRC9CNTQ4REJFMjYyREYxMUYwQTFFMzdFMEVDNEY5QUUwMi9ObUl2bVFD
MGFxMzgwRlJrOFExQ3NUQmlVWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGlZdYwDQYJKoZIhvcNAQELBQADggEBAItp2cpQSQ4z9eTDN4Ec
B6ppYQkAs5xsdB/p6nG6sEClqzMzkfPVt8+Ziw5naGkeBSr0OV60FD4G3YyvuPB7
GNdarshqvQqErpLfYRtCAGcYr8+qf9fyiQYdyYBH+Exj9+SMPlerD0oPmwuPnCs3
z73ZAPv13kUur8NzkYPnrUwBwX97w3TvjfN23mIycw40odvyxtz+94t991qkU8mS
DTR32P+UOR11lC8I106gok3fOVRJ9c11LZkiW/5nNYzROD9/jjbsNIuL+A8ZF4Kw
/s396A3BydqB0mcvQiJyjzYVQV3X8Q4IjtgJ3cTi1d8MnVeec7O2/IGoksiT6isj
CyQ=
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:50:59 2026 by rpki-client