Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
File: 9ES43awaKuycmNiYFhxzSCwu1Ig.cer (raw, json)
Hash identifier: 9aT/DdZWiNtqVFX1+A7+SPz58iuKpzpw5Gfyo+fLQhc=
Subject key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8211
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Sep 2026 05:22:07 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.166.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33297 (0x8211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 9 05:22:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:4c:96:57:93:e3:30:b6:0e:b9:f7:9c:4f:
fa:0a:a9:38:77:88:db:81:80:9e:bb:d9:c3:9a:98:
f9:e5:7d:d9:b2:95:e3:31:89:2e:a6:2b:40:82:5b:
fe:8f:58:e3:cc:2a:ff:66:ec:b8:f3:f2:ba:65:40:
c8:3e:53:f0:b3:09:dc:61:b1:04:1e:fb:c8:10:5e:
bf:0d:f1:fb:37:47:72:88:7f:c8:3b:ed:49:4c:ba:
70:09:18:e9:2c:d6:5b:a3:5b:39:12:a6:58:06:fb:
dc:41:f0:5e:20:ac:9d:d6:e0:bf:ef:ec:48:3b:60:
d5:a7:36:dd:2c:56:10:73:9b:42:c3:cd:0c:d6:7d:
03:18:4b:d8:10:f5:e3:9c:12:8b:81:65:fb:a1:46:
32:ec:49:4a:5c:ba:56:3c:1b:13:76:15:c1:a5:8f:
31:c1:f2:a9:20:86:df:4d:ce:48:5a:87:4f:27:d4:
c9:a2:59:29:f4:30:82:e5:6f:36:09:c9:3b:0c:56:
6e:37:ec:c0:72:fe:d3:82:81:12:65:d8:8e:a2:04:
a6:76:9e:aa:f0:55:77:fe:d7:e7:6a:bf:80:80:c3:
41:ba:e0:2b:cb:a7:9c:dd:8b:f5:96:d1:8f:49:c2:
aa:4f:b2:10:d9:a1:51:e3:d5:97:5d:4a:03:b6:e7:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.166.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:40:82:ea:22:0d:dd:c1:b5:7b:86:cb:d4:a9:84:d1:da:fb:
f6:05:6d:3a:b2:16:3d:e9:3b:cc:87:31:8f:29:36:98:ed:4d:
7e:a5:ce:cd:8f:c6:3d:b4:9b:bf:a9:0f:81:6e:5e:9e:1d:6b:
ba:ee:fe:e2:ef:c9:30:20:60:55:09:03:75:9e:18:7e:4d:bb:
29:30:3c:f3:85:b7:bd:5b:7f:21:d9:ed:2c:48:ed:15:25:30:
56:bb:e8:5f:b9:53:93:a5:ea:01:17:18:97:41:3b:ce:8a:18:
ea:1b:61:40:a2:78:2d:71:8d:82:a2:dd:59:4c:48:78:84:99:
6a:bd:72:1b:3b:48:84:e8:68:d5:70:e5:a5:56:1a:ec:15:bf:
2c:e3:0b:1e:60:42:7f:e3:4b:7f:90:b8:f5:51:16:59:0a:87:
d9:b2:ee:58:84:eb:3f:50:8c:0b:84:b3:a9:b7:4a:e5:80:e8:
89:30:79:58:34:39:17:d8:2c:2d:70:d0:f6:c2:64:e3:b2:06:
dc:c2:8d:76:b7:02:5b:25:1b:84:b7:7c:f0:d3:94:ca:45:c9:
75:fa:9e:1f:d4:d7:40:af:a8:19:19:72:f6:43:90:7c:54:40:
5c:11:29:71:d3:4a:f3:25:20:40:3c:e1:13:b5:b6:42:39:3d:
3a:f9:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:26:17 2026 by rpki-client