Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer (raw, json)
Hash identifier: NaG/UWB4QDwAsrS9LRVvXf34GZzl8SNBTWljFQBvLdk=
Subject key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 26 Sep 2026 13:41:39 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.47.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33472 (0x82c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 26 13:41:39 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:5d:bc:4a:e4:eb:19:53:47:d5:c8:a3:55:
49:21:47:7e:c0:5a:dd:bf:85:31:0e:33:ec:4c:95:
98:07:4a:10:1b:89:4b:c3:bd:58:b3:d4:43:65:3f:
24:87:69:a4:9d:43:b7:13:09:f6:4a:0a:87:55:f5:
19:3c:d0:cb:66:51:77:40:eb:60:e3:ff:0a:a9:68:
95:a2:91:0b:b4:af:52:2d:d9:24:db:6d:63:ac:cf:
4e:df:8b:15:91:3d:ae:a4:47:5a:77:01:74:64:5e:
ec:f8:6e:6c:20:20:90:6f:70:50:45:cf:f8:1d:ad:
ad:9a:9b:76:d3:1e:59:0a:4d:9f:3a:c6:58:27:06:
73:54:23:63:91:32:bc:e8:0c:66:00:7c:2a:b8:22:
47:61:f4:47:7a:33:09:a2:0b:16:aa:69:fe:61:ca:
62:9a:b0:4a:ab:0e:dc:02:72:11:52:52:a3:96:b9:
5b:61:e8:b6:34:26:a0:4a:37:43:94:00:9b:93:98:
a8:f0:84:05:a1:10:e2:38:3e:1d:49:62:cc:7d:30:
c8:1a:1d:95:3e:d0:b3:db:79:51:4f:a2:73:b1:ec:
01:68:e7:c7:39:c6:92:f6:c3:6c:e0:15:14:8c:aa:
2a:f2:57:0f:c0:4f:d0:44:97:6a:ed:ac:d7:30:20:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:18:73:3e:13:a8:e0:56:e1:76:4f:1a:5e:18:24:57:4f:9d:
1d:9a:94:3c:63:a0:2c:83:3e:84:51:01:35:c3:ec:22:4d:9b:
1c:60:f9:c4:32:ff:ff:9a:99:b6:b5:7e:12:e5:5e:75:db:cd:
ca:21:5b:f7:f6:6e:4f:e2:8d:71:93:c1:61:f7:31:0f:fb:ad:
2d:6e:18:ee:7d:c1:38:ab:de:ab:e1:49:dd:9c:13:67:ad:f3:
80:3f:d4:c4:50:e5:e6:3b:e8:a9:9e:4f:2a:82:00:c1:ac:3f:
a8:74:3c:dc:58:19:7b:05:65:73:e7:be:b2:67:f7:9f:16:97:
d9:20:28:b1:74:01:50:1d:f1:10:3b:c9:0c:b7:53:51:3e:aa:
6b:0c:e5:3d:35:62:fd:7c:2d:e8:c8:27:57:43:d9:13:b4:28:
3c:30:33:ab:cd:e0:26:e1:6f:ba:2e:5a:a9:03:a4:26:86:ee:
d8:a7:74:29:64:02:25:e3:e3:ba:72:67:e4:8c:99:bb:f1:cf:
5e:4b:36:d3:09:a1:c7:03:76:f5:25:f5:9e:cb:44:e1:8f:70:
dd:c3:a0:5f:39:94:5b:5d:f8:23:a4:b9:7c:bb:49:d5:ac:64:
58:3b:8b:7c:cc:bd:6a:5e:75:ca:ab:f7:87:42:8f:0a:b8:ac:
e6:07:3b:69
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAILAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkyNjEzNDEzOVoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkZFNEUxMTAvBgNVBAUTKEM3MjAwMjc2N0ExMEVDMkZGMTQ1MTVB
MkFBQjg2RTYxNDA5N0E3NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyj128SuTrGVNH1cijVUkhR37AWt2/hTEOM+xMlZgHShAbiUvDvViz1ENlPySH
aaSdQ7cTCfZKCodV9Rk80MtmUXdA62Dj/wqpaJWikQu0r1It2STbbWOsz07fixWR
Pa6kR1p3AXRkXuz4bmwgIJBvcFBFz/gdra2am3bTHlkKTZ86xlgnBnNUI2ORMrzo
DGYAfCq4Ikdh9Ed6MwmiCxaqaf5hymKasEqrDtwCchFSUqOWuVth6LY0JqBKN0OU
AJuTmKjwhAWhEOI4Ph1JYsx9MMgaHZU+0LPbeVFPonOx7AFo58c5xpL2w2zgFRSM
qiryVw/AT9BEl2rtrNcwILMtAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUxyACdnoQ
7C/xRRWiqrhuYUCXp1wwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJGRTRFL0QxNjVFNEEyN0JFMzExRUY4OEQ5Qzc1M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCRkU0RS9EMTY1RTRBMjdCRTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5v
UTdDX3hSUldpcXJodVlVQ1hwMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACgHi8wDQYJKoZIhvcNAQELBQADggEBAB0Ycz4TqOBW4XZPGl4Y
JFdPnR2alDxjoCyDPoRRATXD7CJNmxxg+cQy//+amba1fhLlXnXbzcohW/f2bk/i
jXGTwWH3MQ/7rS1uGO59wTir3qvhSd2cE2et84A/1MRQ5eY76KmeTyqCAMGsP6h0
PNxYGXsFZXPnvrJn958Wl9kgKLF0AVAd8RA7yQy3U1E+qmsM5T01Yv18LejIJ1dD
2RO0KDwwM6vN4Cbhb7ouWqkDpCaG7tindClkAiXj47pyZ+SMmbvxz15LNtMJoccD
dvUl9Z7LROGPcN3DoF85lFtd+COkuXy7SdWsZFg7i3zMvWpedcqr94dCjwq4rOYH
O2k=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:19:17 2026 by rpki-client