Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
File: PgzfiCrujHIh1YijxSYBjh1kyWg.cer (raw, json)
Hash identifier: R0o9gAIBZFQGXvxWfYvmRCgcxPt/NQRUWLPiQ8AFfqo=
Subject key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78C2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Mar 2026 14:19:29 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.84.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30914 (0x78c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 20 14:19:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:4d:70:46:ae:ae:3a:5b:54:4f:47:7a:ee:
ca:65:55:62:c1:cf:86:74:b4:55:80:a5:b0:39:88:
53:b6:11:e2:34:8a:be:b1:fb:f3:72:73:70:87:e4:
82:b9:07:b9:38:36:d2:07:e1:93:8b:e1:23:04:20:
92:85:24:55:e8:0f:f7:a3:dd:c9:b8:f5:1f:8c:7e:
ee:21:91:c5:b5:ae:0c:62:cc:33:6c:19:74:b6:d6:
79:31:a0:d0:f9:ec:e9:c7:55:ea:cf:81:fa:0e:a9:
7e:f5:03:7d:34:31:56:f2:3e:32:32:b1:dc:5a:ca:
52:67:4a:59:1b:f4:f6:c7:8c:c5:56:9a:45:7f:27:
b8:3d:84:0c:70:31:51:5f:f2:ba:ec:97:ca:bb:13:
72:46:70:34:ca:97:79:eb:f1:1c:29:74:2c:76:1c:
3f:91:c2:c2:61:c9:8e:51:00:fb:dd:64:e7:e9:38:
32:f1:84:9a:23:51:55:c7:5a:62:16:9b:74:c6:e0:
84:48:6a:5f:3a:c9:08:42:6d:a8:7a:2a:d7:82:ba:
80:a8:d6:9c:cb:4f:d3:f8:74:c6:e7:28:ff:55:94:
43:f9:50:a1:5a:d9:17:50:e8:d7:92:32:f8:39:c2:
41:e1:02:0c:a3:35:a2:13:60:27:2c:0b:db:65:32:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.84.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:63:4e:e1:74:e1:c3:88:a3:dd:f9:c8:d0:e5:6c:a8:54:0d:
05:0e:c2:0c:b1:52:fa:70:30:09:f2:cc:dc:af:6f:0c:28:48:
61:06:89:a0:b3:11:e8:7e:38:05:ab:4a:01:9b:0e:2c:29:50:
78:21:fd:0f:93:2e:ff:1e:f9:1d:83:65:0c:ff:c2:46:08:45:
58:53:43:d0:10:cd:7b:13:92:1a:3d:78:79:ea:ce:74:3a:09:
aa:06:04:f6:1c:99:b2:bf:3c:6a:35:27:22:3c:52:cc:17:15:
22:3e:67:a4:e5:23:7f:ee:f3:a8:f3:6c:ff:75:0c:7a:25:5f:
0d:69:1d:74:8c:1e:e5:1c:d9:95:f6:c0:5b:92:ff:01:9d:11:
b0:a8:86:89:1f:1b:7f:22:19:aa:c2:94:fc:1f:3d:c1:e0:b3:
8a:18:a6:50:cf:90:cf:63:12:b0:ca:e4:42:c3:32:58:92:ba:
73:25:8b:fb:f1:75:cc:c3:82:74:b0:87:cf:59:5c:32:43:18:
28:a6:8f:b9:aa:a3:9a:f9:d1:48:2e:b0:de:28:93:cc:62:fe:
d2:60:d3:71:7c:c6:61:33:3c:80:eb:44:99:d9:60:ef:64:7c:
bc:2b:59:70:ec:c1:96:ba:6e:97:4f:91:7a:5f:54:55:cc:d3:
41:91:2d:db
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMzIwMTQxOTI5WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDRUQzMDExMC8GA1UEBRMoM0UwQ0RGODgyQUVFOEM3MjIxRDU4OEEz
QzUyNjAxOEUxRDY0Qzk2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AODrTXBGrq46W1RPR3ruymVVYsHPhnS0VYClsDmIU7YR4jSKvrH783JzcIfkgrkH
uTg20gfhk4vhIwQgkoUkVegP96Pdybj1H4x+7iGRxbWuDGLMM2wZdLbWeTGg0Pns
6cdV6s+B+g6pfvUDfTQxVvI+MjKx3FrKUmdKWRv09seMxVaaRX8nuD2EDHAxUV/y
uuyXyrsTckZwNMqXeevxHCl0LHYcP5HCwmHJjlEA+91k5+k4MvGEmiNRVcdaYhab
dMbghEhqXzrJCEJtqHoq14K6gKjWnMtP0/h0xuco/1WUQ/lQoVrZF1Do15Iy+DnC
QeECDKM1ohNgJywL22UyzeUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ+DN+IKu6M
ciHViKPFJgGOHWTJaDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0VEMzAvQkU4MEM2QTZBRTFFMTFFRUE3RUEwQTc3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNFRDMwL0JFODBDNkE2QUUxRTExRUVBN0VBMEE3N0M0RjlBRTAyL1BnemZpQ3J1
akhJaDFZaWp4U1lCamgxa3lXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0KVDANBgkqhkiG9w0BAQsFAAOCAQEAb2NO4XThw4ij3fnI0OVs
qFQNBQ7CDLFS+nAwCfLM3K9vDChIYQaJoLMR6H44BatKAZsOLClQeCH9D5Mu/x75
HYNlDP/CRghFWFND0BDNexOSGj14eerOdDoJqgYE9hyZsr88ajUnIjxSzBcVIj5n
pOUjf+7zqPNs/3UMeiVfDWkddIwe5RzZlfbAW5L/AZ0RsKiGiR8bfyIZqsKU/B89
weCzihimUM+Qz2MSsMrkQsMyWJK6cyWL+/F1zMOCdLCHz1lcMkMYKKaPuaqjmvnR
SC6w3iiTzGL+0mDTcXzGYTM8gOtEmdlg72R8vCtZcOzBlrpul0+Rel9UVczTQZEt
2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:40 2026 by rpki-client