Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.cer (raw, json)
Hash identifier: GF1kBKQsLl9lIXvE5qoght/AB9neDu8Y9ZruGv1jtjs=
Subject key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80E2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 13:18:14 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 192.84.219.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32994 (0x80e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 18 13:18:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:a9:fa:2d:b6:27:43:a2:29:02:21:fe:a5:
f2:24:73:ca:27:76:64:05:2c:18:53:d3:e7:66:98:
3c:c0:6e:be:d3:13:d7:cf:33:f7:d4:ec:f2:0b:a9:
ca:c0:09:3a:29:d5:7c:e2:37:ce:26:00:24:a5:df:
70:6d:73:11:f8:b5:de:a8:96:c4:c8:01:b2:1b:1b:
80:51:4b:b5:cb:34:63:8b:fb:ca:be:9b:c4:91:06:
35:55:0f:9d:fc:d3:d5:f1:f3:ec:ac:c4:98:c3:21:
5d:20:4d:5c:ba:82:cb:b5:22:7c:d3:47:5f:b1:03:
9d:27:ea:31:00:a5:c1:bc:03:29:9b:95:da:5b:0c:
93:7e:4a:67:f7:2e:0d:17:aa:fd:fe:9b:76:c1:a5:
da:1b:53:8b:2f:7a:78:9f:2e:d6:5a:f0:ba:73:18:
6d:23:1e:da:b4:bc:48:8b:fb:eb:ba:4b:ce:bb:fa:
5c:66:bf:fa:fc:7e:80:b8:85:76:35:df:88:79:2f:
84:c5:ae:39:01:d5:25:1b:be:32:03:84:e9:c9:af:
13:73:06:21:b1:1a:f2:1e:14:9a:e6:a5:70:a3:3c:
14:a8:75:f4:62:d1:b9:b3:89:35:24:b3:5a:dc:66:
dd:ee:77:0a:b5:5d:12:0d:a3:da:70:a2:b5:ae:a2:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.84.219.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6a:5d:ee:a4:44:82:96:e7:4a:64:66:80:62:09:fb:b5:35:
f7:6d:0b:eb:95:ad:37:a6:92:04:57:8f:b5:a6:09:75:4f:3d:
de:c3:db:3d:46:0b:00:27:42:b3:31:1c:91:d9:8f:c2:f7:a2:
a0:33:c4:ae:00:6f:f9:c8:26:b8:39:e9:e6:9d:a2:33:34:b7:
52:30:06:32:7f:04:31:51:6b:fc:4d:dc:52:1e:ac:56:eb:c6:
6c:d2:f4:a9:1b:4e:86:37:62:45:f7:0a:59:ae:0d:c6:0b:c1:
c9:98:ff:0e:b0:6a:ac:fe:d4:f9:29:30:4b:9f:f2:da:aa:9b:
2b:a1:7c:8f:29:25:26:6d:03:45:a9:ba:56:d0:46:91:9f:c5:
fa:2e:11:c0:42:f0:a9:fa:38:89:dd:90:f6:52:e6:31:5d:6d:
43:ab:1a:c4:a8:d6:8f:70:7c:76:e2:74:97:4b:d0:2d:66:61:
0e:6f:96:71:41:78:97:c3:77:4a:8f:af:b0:58:f2:90:b8:a9:
da:f4:c6:fd:6e:a9:4f:12:8d:2f:4f:62:2a:32:53:c5:1f:a9:
b8:eb:5e:5a:52:09:29:f5:2e:d9:19:b3:bf:c8:31:14:59:14:
9a:35:5e:aa:4d:11:c3:91:93:36:ec:8e:57:a6:37:e3:94:2a:
0b:48:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:58:21 2026 by rpki-client