Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
File: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer (raw, json)
Hash identifier: h3wfaUIF1x1mYK1Chvd4n+FnifRYW4NQiAiOHd9biFA=
Subject key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 752A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:49:46 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 192.232.62.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29994 (0x752a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:49:46 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:84:67:5f:62:5b:08:6d:10:fb:71:7b:ac:f3:
ff:ef:8a:9f:59:bf:8f:6f:ca:dc:c3:c3:b7:c5:bb:
ba:35:89:3a:56:f1:3d:d6:51:b0:c9:46:3a:20:ce:
11:83:b4:b9:b5:63:32:ee:a3:c2:e8:87:59:98:97:
46:19:b1:fe:ec:d5:61:e1:d5:24:dd:d5:82:c1:1a:
df:48:6d:6a:a3:6a:62:2f:30:e7:f6:1f:d7:89:23:
7f:12:da:44:d2:c3:f9:55:62:27:b5:aa:4c:80:19:
ac:64:97:87:0a:95:a7:d5:74:da:cc:73:1d:30:9f:
6e:4e:ab:42:13:cc:35:9d:8e:74:f3:b6:c6:19:0e:
e1:29:7d:8d:47:96:6c:aa:ef:af:f5:21:04:ae:30:
30:2d:2d:04:b7:ea:af:d4:71:7c:e3:2c:db:ff:9e:
86:29:4c:e2:44:89:aa:42:86:a8:8e:c1:98:44:c2:
70:31:33:c4:02:0e:86:ee:e0:8c:b4:2e:89:45:78:
a9:cc:b4:7d:00:be:e9:60:ae:0d:50:f9:f8:c1:79:
af:06:eb:5d:66:a9:7a:9c:df:47:43:5b:31:7d:e9:
76:c9:00:84:7e:4b:91:f0:26:74:93:fa:5c:5d:85:
9a:6c:4d:0f:34:dc:cf:e3:d5:fa:7b:ee:aa:de:c8:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.232.62.0/23
Signature Algorithm: sha256WithRSAEncryption
38:97:d0:64:bd:15:ec:25:14:9f:e8:a8:36:cc:98:45:28:c1:
1d:08:21:64:f1:cf:eb:44:f1:c2:fb:84:73:36:f6:7e:2b:35:
79:7a:58:3a:c8:d4:f1:18:b6:b1:1b:9b:16:3d:2d:b3:14:b5:
9c:51:2d:b0:96:31:af:ba:27:33:10:f4:7c:34:c2:be:a6:96:
d4:2f:50:62:a9:f3:32:63:94:6d:8c:c3:72:53:af:8a:8e:93:
fb:5b:8f:35:cc:5f:f0:21:1b:03:53:f1:42:8f:3a:2e:5c:ac:
bb:97:32:28:19:9e:c7:7a:c5:b6:db:e5:a3:81:1f:1b:c5:8b:
d0:f9:0b:c0:46:e5:2a:7c:fa:c7:c8:77:70:10:61:73:85:dd:
9f:ec:3f:71:5f:33:d6:6d:66:9d:64:f0:c3:c3:b0:b2:14:5e:
e3:f0:0c:54:ba:d3:f3:f1:00:64:3a:2a:2f:30:d4:40:c5:ee:
e0:d0:83:ce:3d:16:b9:f7:7f:c7:48:39:d2:a8:e0:77:45:40:
8a:b9:56:f3:4a:6d:cf:ef:ea:f5:66:b1:1b:33:a5:a4:b5:fb:
27:d5:25:97:18:5b:14:73:9d:a1:72:a9:37:0f:ff:4a:55:03:
c2:db:c4:24:17:54:c7:ed:6b:97:b6:d4:be:27:d6:71:9b:31:
9f:c1:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:49 2026 by rpki-client