Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EsIS5VKnvhEl5ohMbpTj7_6i7iw.cer
File: EsIS5VKnvhEl5ohMbpTj7_6i7iw.cer (raw, json)
Hash identifier: mpmWs8pNMOxHn0kKp89cj8Vq65PWGZt7GP6v8xHY0+U=
Subject key identifier: 12:C2:12:E5:52:A7:BE:11:25:E6:88:4C:6E:94:E3:EF:FE:A2:EE:2C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C6B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jun 2026 13:59:26 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.197.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 10:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31851 (0x7c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 4 13:59:26 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A915F1EE, serialNumber=12C212E552A7BE1125E6884C6E94E3EFFEA2EE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:a5:2e:f5:0d:e5:0c:d1:19:48:67:67:2a:
7d:46:79:c1:02:8b:08:09:6a:3f:18:3e:36:f5:fa:
d5:18:a9:70:3c:ed:6b:3a:e0:7f:9a:ef:4c:47:e6:
4b:44:66:78:98:86:35:92:aa:95:86:0d:bc:0e:b9:
97:77:11:d5:6d:5c:8f:70:6c:11:f8:e4:6a:30:ae:
4f:30:76:42:b3:41:c1:00:bd:1b:72:1b:9a:42:72:
a9:07:25:20:bf:ff:b1:40:68:71:08:d6:cf:e1:2e:
9b:ab:cc:86:02:f7:21:65:5b:31:62:1c:f4:fd:d4:
47:4c:8e:df:f0:67:6a:be:cb:74:87:1a:85:5f:22:
72:4d:74:ac:98:4b:3d:2b:dd:62:f5:e6:0e:31:d9:
58:3e:8c:1b:ae:4f:70:3b:66:fb:ca:4d:ec:ee:eb:
f0:46:29:6a:8d:2d:cf:b5:c0:f2:a7:38:b9:2e:46:
3e:68:cf:1b:63:0b:f7:01:2f:a5:86:e7:25:0b:f8:
17:65:f7:60:a5:8b:09:16:2f:89:08:a2:65:b6:6f:
e7:d8:d5:80:db:d3:23:b9:4f:9a:0e:58:e4:01:4e:
2a:7e:2f:10:96:83:5b:8d:5b:a7:29:11:26:8b:39:
6a:9a:b9:1e:11:af:fb:6d:ce:63:f2:2b:d2:e4:eb:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:12:E5:52:A7:BE:11:25:E6:88:4C:6E:94:E3:EF:FE:A2:EE:2C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.197.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f3:92:7b:91:ef:25:4b:79:76:20:00:b5:57:7e:9b:a3:99:
bf:94:a5:92:f5:9b:50:d0:99:c7:f1:d8:d0:36:01:60:c5:1c:
d2:1a:be:b0:9d:e7:e5:32:6f:58:19:99:be:d6:68:9a:34:72:
c6:b5:1a:59:90:ec:9a:6f:46:dc:fa:a3:84:0f:71:ec:cc:e9:
51:d7:f9:97:d4:ca:1f:45:d0:d2:ab:ea:54:59:a5:1b:d9:76:
70:d4:f5:17:99:8c:dc:06:96:f0:a2:95:93:7b:a8:d7:c7:cc:
23:9b:08:f0:ef:3e:37:4f:8a:7c:ca:77:e6:06:04:3a:02:7a:
55:08:6a:10:77:2b:8d:e8:80:d5:37:9a:b1:bd:9b:32:79:2a:
69:51:2a:0f:d7:e5:82:f0:c5:64:d0:be:ec:01:c7:b9:65:79:
73:79:18:b6:c9:cf:6c:27:6c:b1:f6:aa:33:8d:6a:86:62:75:
a5:0a:40:f0:9e:f7:fe:5f:c8:8c:e4:85:ad:59:9e:a0:53:f7:
05:87:3b:77:9a:08:1e:c5:2f:97:ec:3f:7e:7f:f6:31:df:f6:
ed:ee:1a:53:9b:c4:14:a0:e9:51:21:12:54:e2:6e:3a:c9:61:
c5:83:6a:67:25:56:d7:d4:4e:63:99:f3:eb:a2:75:bc:8e:91:
c0:a6:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:47 2026 by rpki-client