Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer (raw, json)
Hash identifier: oilHYcvs9Jo06ZoT+5o0gmL6xDLFQA7FVUDqoo7pk2M=
Subject key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 13:17:11 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 155.35.34.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33217 (0x81c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 13:17:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:aa:46:c7:92:81:f0:f2:fc:4c:a3:56:d5:
60:fb:b4:b3:bf:54:0a:7a:4e:1d:90:b8:a0:db:46:
cc:b3:85:06:cf:21:05:80:69:9e:b0:71:cc:c1:9a:
2b:82:16:0b:d5:0d:66:4f:e0:72:47:ed:f4:96:73:
7e:57:09:07:1f:0f:b2:77:99:3b:41:94:d3:b3:dd:
05:be:44:2e:5a:4e:4d:d9:c1:e4:24:d2:eb:38:13:
19:4e:db:cd:b8:60:11:08:ab:5f:2b:e9:ec:1c:80:
c9:0f:72:bf:b7:fd:c1:5b:70:c3:21:d3:ed:99:d2:
c8:12:e3:29:fa:f0:d8:96:3a:e7:bc:94:de:82:3c:
cc:f8:18:e9:b5:96:31:dd:b7:a9:84:d1:12:e0:c9:
c5:dc:c8:80:4c:79:b8:bc:21:92:04:49:79:95:64:
3c:4d:20:f4:be:e6:e3:d3:de:47:03:42:d7:f0:b1:
a2:aa:8a:7c:9e:38:7c:21:13:01:32:32:08:86:b3:
72:68:c0:fd:1d:b9:9b:73:a9:22:2f:13:f9:56:85:
08:fa:ce:98:5a:26:19:9a:2b:3e:ab:f0:8b:b5:d9:
be:96:ac:a8:f8:7d:64:6f:b0:cf:d0:f5:de:b9:70:
31:10:68:e2:3a:d2:f8:94:38:27:dd:8c:f0:c5:ac:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.35.34.0/23
Signature Algorithm: sha256WithRSAEncryption
12:70:e5:58:bb:6b:6d:fb:a1:99:be:ac:19:ee:b5:ed:1d:ff:
6e:3e:bf:6a:47:63:9e:ce:fc:d5:4f:7a:84:81:5d:6d:83:83:
48:12:64:c4:60:0e:c8:76:3d:b3:04:42:b4:3a:20:a5:d6:32:
c5:f7:31:3f:4f:8b:88:80:9c:c8:43:a1:c9:f9:35:69:ea:0c:
62:98:a4:ea:cd:5c:ee:7d:68:d3:a6:c1:cf:de:39:8e:b5:86:
12:47:f0:69:2d:be:3d:95:6f:2b:88:1e:4a:ee:2c:ff:76:f2:
ca:cb:20:0c:f8:dd:d3:9d:6f:23:bc:f5:54:f3:74:65:20:2c:
50:c9:9f:5e:84:13:53:be:02:0d:3a:14:8e:b6:2c:50:03:85:
f1:67:fa:f5:4e:a1:82:04:d0:42:9e:4f:82:b6:e3:0b:bf:c3:
6a:cf:1f:0a:0c:80:b2:5f:a3:4e:e5:46:9e:bb:64:3b:a4:05:
1e:9b:c4:0d:83:c3:a9:f0:e1:91:70:1e:30:3c:ed:ef:ad:56:
eb:dd:a7:9c:02:75:ff:81:1d:db:e1:4e:0e:47:3c:91:a1:7a:
d7:2c:d0:97:bc:1f:b4:62:11:cd:95:cc:de:48:80:d2:46:07:
cd:8d:6d:c9:93:b8:7b:75:aa:e7:26:9f:51:8e:f1:1c:c3:10:
ff:73:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:08:28 2026 by rpki-client