Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
File: -YvpQtnreFakMNG8KUc7xN1nf-o.cer (raw, json)
Hash identifier: TDa3l7rU4iZ3ALiTD2I+it3ayYVvkZjJ3NnhIdGigkw=
Subject key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7FD1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Jul 2026 14:17:57 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.144.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32721 (0x7fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 31 14:17:57 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:06:97:06:5c:15:33:04:6a:4c:8d:e9:b8:
08:87:58:fa:0d:e3:cc:df:1f:13:ae:11:a0:02:55:
0d:a4:a5:dc:a7:a6:89:94:0b:14:ef:5e:22:09:9f:
3a:79:93:2a:25:d6:0e:f2:2e:fe:1a:db:60:e6:4c:
e5:47:29:43:24:44:cf:ab:7d:af:d4:9a:5f:33:52:
1a:28:33:83:4f:9f:d9:5b:80:b2:1b:35:52:8b:39:
f5:34:78:40:d1:2f:de:97:e3:4b:38:7d:b6:71:4a:
df:b3:15:76:eb:22:87:aa:b8:7d:8c:32:51:97:d5:
7a:f6:1a:d0:62:f0:9d:27:49:e3:c5:c7:81:39:9e:
92:33:4d:ba:9b:2f:fa:8d:8e:d8:1a:5b:9a:94:e8:
51:03:e0:69:43:cd:0f:30:4c:e1:9b:0f:0b:31:1f:
74:3f:0e:8e:d4:3f:25:e0:a9:cf:a5:98:0e:ff:39:
bd:ac:e8:80:29:fc:c2:96:96:20:7d:89:3e:ca:05:
b5:b9:79:e8:87:85:81:ef:af:c7:71:a9:1d:55:56:
75:bb:c9:bd:a0:a0:cb:bb:3c:4d:7d:71:f0:b4:33:
08:88:98:f0:ef:8f:43:46:df:79:ff:ba:95:12:6b:
7e:af:44:fa:e7:64:ee:5e:5e:dc:2b:d9:5c:4b:76:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.144.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1c:bb:94:79:60:66:0e:ba:53:6a:46:60:67:b9:09:73:53:
b5:7f:fb:95:a0:22:44:95:3f:e9:e9:e1:b0:24:12:80:10:d9:
c8:fd:21:3f:53:8e:b0:88:fa:2f:df:b6:6e:c7:d7:c0:e3:47:
5a:72:c5:bd:67:23:e5:6d:5c:d7:36:fb:86:5e:dc:6b:15:ac:
ea:cc:5f:25:41:26:b4:96:75:65:9c:9d:22:6c:90:d5:e8:69:
34:5b:e8:2c:aa:2d:14:87:f3:f7:1c:05:62:7e:7e:de:9c:3f:
96:1b:e5:21:bd:ed:04:9b:7e:a2:ec:e8:a3:d6:21:36:52:56:
8f:74:a7:0e:a8:fe:f9:35:b5:3e:42:6f:4a:be:20:9d:e6:ed:
47:c7:8b:1e:d0:fe:8c:04:f4:45:f8:b8:17:17:27:1d:a1:87:
88:6e:55:a9:50:20:1b:03:e8:ee:4d:86:26:c6:95:22:cd:4a:
d1:d0:7a:54:78:ff:46:96:93:38:38:c4:c4:4e:5f:d6:2c:d0:
e1:0d:9d:1f:f7:a4:d6:2d:aa:ef:6e:72:00:c0:a1:6f:75:33:
56:1e:cd:66:0b:d4:91:4f:27:d2:a2:55:7c:c9:f5:a4:c2:68:
64:6f:c7:58:46:0d:b5:c9:1b:8d:52:a4:07:0c:48:2a:3b:f2:
89:b4:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:39:47 2026 by rpki-client