Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
File: hRn_LGgILMZHuCh2C0t7FJXshMs.cer (raw, json)
Hash identifier: 2bQnFQyphB337RgkO1dFi+9Sn3bC7m1nBcVsko9xotk=
Subject key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78E8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Mar 2026 17:51:42 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 146.19.9.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30952 (0x78e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 24 17:51:42 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:c6:7f:b8:bf:dc:7f:20:4b:e0:11:73:61:
ed:39:e8:82:25:a5:70:b9:07:7d:19:4c:88:99:38:
a0:86:b3:eb:c6:19:ca:01:8e:c3:f2:3f:00:db:63:
b5:cb:4b:af:a7:04:5c:5e:0e:d2:c3:ac:40:24:46:
c8:32:2d:c3:a1:00:37:3d:82:b4:ec:b1:aa:f9:2d:
9b:fe:26:03:bc:dc:a8:42:a7:c8:1c:f6:e0:5b:a2:
7f:04:e2:14:b8:7d:23:f2:10:56:94:42:ba:c4:fe:
52:c2:c7:cd:5e:f6:30:ab:4c:ac:75:d1:88:22:bd:
4c:b7:e4:10:e0:98:83:ab:23:80:b4:26:d6:bc:4c:
75:98:e7:e6:0a:51:02:66:b4:a2:40:da:c7:9c:06:
c7:11:bb:71:8d:1b:61:d5:31:3d:35:49:41:2b:e0:
b3:fc:6a:e6:5c:df:53:0a:ae:74:02:16:ab:0f:da:
e3:4e:08:ee:00:24:77:5e:7c:bc:eb:96:1d:87:32:
72:8f:53:9b:a4:6f:8c:5f:99:00:38:46:0e:e8:32:
f5:99:ac:49:d0:eb:08:7a:35:91:de:a4:95:09:89:
3d:5d:d7:41:62:2c:9b:98:e9:d0:40:88:41:80:1f:
21:52:df:22:82:73:75:63:3a:ad:77:96:02:4c:c6:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4b:f9:98:ae:22:37:4b:93:0f:9c:2d:87:1e:8c:a5:fc:54:
64:8e:11:e8:7e:c5:be:77:4a:6a:44:c5:3a:90:82:ff:6d:c9:
90:31:64:93:f3:81:08:c9:0f:32:1b:eb:e3:32:a9:6e:8a:87:
87:55:20:ff:cc:2d:67:99:75:29:33:f4:05:b2:63:f4:50:fe:
0d:a6:81:3b:fa:38:3b:61:4c:fd:f0:27:01:e3:69:34:61:93:
be:5c:23:0b:d3:5c:c2:40:79:20:cc:cb:ff:31:73:c5:3e:bb:
ff:4b:7c:62:b4:bf:80:5a:a4:35:8c:55:fa:a7:d7:f6:3a:f7:
01:3a:49:5f:de:30:52:e9:7e:6d:48:93:c8:36:eb:dd:53:1e:
38:0b:78:90:6c:85:1a:e4:00:76:d4:9b:06:4d:c7:9f:df:4f:
ad:56:41:3f:34:19:4a:cb:f7:72:c9:39:7e:cb:22:dd:c4:41:
73:08:8d:35:74:5c:c4:b8:03:a2:c4:e8:82:68:e7:9a:9c:e6:
e7:3b:b3:c2:da:96:df:dc:a9:44:17:3d:f7:97:97:7d:fb:bb:
cd:35:d4:9c:9a:7f:27:29:63:17:10:62:de:e2:a8:c3:5a:d4:
4a:4a:f7:cb:9b:94:34:a8:13:fd:b5:f2:aa:2d:df:e7:07:8a:
ac:7f:b5:4a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMzI0MTc1MTQyWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5MzM3RjExMC8GA1UEBRMoODUxOUZGMkM2ODA4MkNDNjQ3QjgyODc2
MEI0QjdCMTQ5NUVDODRDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMIWxn+4v9x/IEvgEXNh7TnogiWlcLkHfRlMiJk4oIaz68YZygGOw/I/ANtjtctL
r6cEXF4O0sOsQCRGyDItw6EANz2CtOyxqvktm/4mA7zcqEKnyBz24FuifwTiFLh9
I/IQVpRCusT+UsLHzV72MKtMrHXRiCK9TLfkEOCYg6sjgLQm1rxMdZjn5gpRAma0
okDax5wGxxG7cY0bYdUxPTVJQSvgs/xq5lzfUwqudAIWqw/a404I7gAkd158vOuW
HYcyco9Tm6RvjF+ZADhGDugy9ZmsSdDrCHo1kd6klQmJPV3XQWIsm5jp0ECIQYAf
IVLfIoJzdWM6rXeWAkzG5i8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSFGf8saAgs
xke4KHYLS3sUleyEyzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTMzN0YvMUI1QkY3RkUyN0FBMTFGMUI3NTE5NTVBQjdFRTUyOEUvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzMzdGLzFCNUJGN0ZFMjdBQTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJ
TE1aSHVDaDJDMHQ3RkpYc2hNcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJITCTANBgkqhkiG9w0BAQsFAAOCAQEAsEv5mK4iN0uTD5wthx6M
pfxUZI4R6H7FvndKakTFOpCC/23JkDFkk/OBCMkPMhvr4zKpboqHh1Ug/8wtZ5l1
KTP0BbJj9FD+DaaBO/o4O2FM/fAnAeNpNGGTvlwjC9NcwkB5IMzL/zFzxT67/0t8
YrS/gFqkNYxV+qfX9jr3ATpJX94wUul+bUiTyDbr3VMeOAt4kGyFGuQAdtSbBk3H
n99PrVZBPzQZSsv3csk5fssi3cRBcwiNNXRcxLgDosTogmjnmpzm5zuzwtqW39yp
RBc995eXffu7zTXUnJp/JyljFxBi3uKow1rUSkr3y5uUNKgT/bXyqi3f5weKrH+1
Sg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:25:05 2026 by rpki-client