
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
File: 67mxD9JPdAljNjwtk1eAidsN5_U.cer (raw, json)
Hash identifier: VcHuxzcOLz8q9l/z2QkGKWkYnH/O7dlRu+xuTc/pxYM=
Subject key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8039
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 06:08:17 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 192.207.119.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32825 (0x8039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 06:08:17 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A915393C, serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:64:dd:ba:ae:1d:fd:23:46:75:a2:c3:43:cf:
9e:9a:bd:4a:ba:3a:1c:f3:f0:ab:25:b5:67:9c:65:
17:c6:e0:20:7b:46:de:c1:bc:20:b7:87:b4:b4:16:
38:da:ca:9f:91:25:8a:96:b4:8b:d6:93:2c:c1:f7:
76:de:e7:79:06:d3:47:2f:ef:96:e9:0c:f1:56:4e:
22:72:c6:a7:a5:44:99:2b:58:01:c3:2b:63:05:c5:
11:91:9c:c8:b5:94:3b:40:67:b1:f6:ee:d8:47:00:
f5:ab:1a:e4:3b:43:30:51:45:5d:0f:25:ba:fe:a9:
fb:74:99:94:20:d0:59:bd:53:c0:cf:fa:56:74:48:
51:e7:58:fc:de:18:8f:d2:fd:38:37:43:9e:c1:dd:
1b:a4:08:d7:c2:f1:da:20:e9:28:05:37:9a:f1:cc:
4f:4a:ab:6c:dd:7a:92:3c:08:40:8d:bf:67:4d:3a:
c8:46:50:97:ba:0b:4e:1a:78:11:08:78:88:06:99:
85:12:c3:99:9f:37:b5:01:0f:3f:18:7d:d8:bb:03:
b1:20:85:a4:2d:94:13:e9:b1:9f:52:7e:55:37:33:
20:7d:a7:d6:fb:80:a1:6c:cb:cf:8e:aa:02:35:d2:
9e:d4:59:3d:58:3e:30:39:aa:1e:ac:a1:02:e2:05:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.207.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a4:b5:56:64:4a:0c:50:21:29:1b:ed:26:97:1a:65:6c:f4:
14:7e:a7:b2:eb:9f:bf:2c:8d:08:e6:63:14:53:35:ed:52:5c:
5a:80:bd:d8:9d:b3:f6:7f:af:e7:a9:73:bf:b3:32:e8:56:6c:
29:67:a3:bd:3a:b0:91:39:ff:ca:eb:89:12:2a:10:33:07:d8:
88:7d:d5:99:2a:5a:26:18:d4:33:23:10:65:b1:13:e4:a4:e2:
d3:ce:f8:c8:15:42:be:f4:0c:0e:02:8c:72:b9:6a:97:6f:66:
80:44:4a:8d:b2:5e:2b:01:6f:a6:55:57:60:d4:0e:10:11:9b:
1a:dd:9e:ae:d3:03:a9:a4:33:1a:9d:57:df:44:36:de:33:9b:
dc:e5:02:82:01:c9:d7:ac:82:7b:c6:d3:3b:23:b9:30:d1:e1:
b4:f6:97:4d:72:92:a9:68:bf:c4:a7:79:dd:08:e1:44:3b:b5:
93:81:1a:41:55:90:53:48:c2:5e:bc:96:cc:d0:4d:36:4a:94:
16:4a:da:31:62:39:f0:07:79:7b:d9:7f:2a:9c:e6:b1:80:24:
6f:be:78:a0:8f:72:90:22:72:59:35:97:f2:75:7f:27:e5:dd:
36:6e:dd:8d:29:3f:07:2b:04:d0:84:6b:76:b9:96:37:c6:1a:
c7:fe:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:19:35 2026 by rpki-client