Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer
File: Ii81OE7WK2pwdPiC574Cnw4E40M.cer (raw, json)
Hash identifier: lU0xVbNKCFTuPONVrqevCk7asOyVubYH1fCTbarfpx0=
Subject key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8142
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Aug 2026 14:06:49 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 162.105.0.0/16
IP: 166.111.0.0/16
IP: 192.124.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33090 (0x8142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 25 14:06:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:b7:1a:10:79:98:37:f8:7e:c6:da:4a:96:
ec:1e:ba:25:e5:25:68:d2:20:f2:77:b0:9d:d9:25:
13:01:90:c9:fb:69:8d:b5:b7:4c:45:29:8c:69:37:
18:42:3d:28:bb:7d:62:13:10:ff:c5:2e:fe:1d:cc:
e8:b9:5c:a7:47:1e:59:df:c4:fc:ff:ed:e2:e0:82:
81:9c:2d:cf:0d:5f:b4:52:bd:51:d5:84:03:cb:70:
6f:1e:95:65:7d:c7:5c:89:08:50:be:13:13:9d:2d:
21:4a:9e:49:78:cb:4f:49:26:d1:08:3c:e5:dd:bd:
da:40:f5:d7:1e:2d:ba:e4:95:c1:cd:6f:2d:0c:be:
de:90:e3:02:9d:0d:48:ec:9c:f3:9f:d6:28:da:2b:
9d:b6:a2:fa:33:36:af:ab:d3:27:7d:f7:3e:c8:d0:
65:69:62:d9:ae:b7:0e:c2:64:bd:92:af:3b:09:09:
34:2b:e1:3a:c8:3b:ae:38:e4:f6:1b:19:33:ab:54:
e4:78:fb:0a:2b:fa:24:b1:ce:44:8c:90:d0:44:b7:
86:98:0b:6c:39:f7:ab:91:9a:9b:c4:34:df:1a:fe:
81:b2:fe:83:1a:c9:e5:21:e5:90:73:0a:48:ad:d3:
0d:59:a4:88:43:2b:e2:44:b8:76:51:e8:6a:0f:77:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.105.0.0/16
166.111.0.0/16
192.124.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:62:a2:fb:09:69:48:92:d9:32:2b:9a:81:bd:45:a2:5a:6a:
07:5a:ed:05:3e:2c:13:14:a2:98:58:9a:b0:5e:af:79:67:9a:
c8:34:ac:ab:3c:0a:47:b1:d3:a1:80:53:d9:43:01:56:5f:4d:
7d:78:ef:ce:41:11:52:ea:6f:56:15:65:66:d4:d8:8c:cc:3c:
d7:ef:29:3a:ca:a9:be:23:e1:9f:2a:78:19:f1:ea:dc:00:dd:
23:6e:7d:bd:bf:4b:61:87:4d:23:3a:85:88:d0:f9:d9:91:f9:
a6:d0:23:5b:c8:82:a3:60:99:45:1f:08:96:a0:0d:cb:d4:01:
16:50:43:7c:79:e3:71:3d:0f:0f:6a:2d:28:af:8b:4f:eb:6b:
08:4c:4c:56:39:b1:ed:81:3c:4c:df:19:c3:9c:02:2f:5b:fa:
da:9d:4e:8f:64:51:df:ba:bc:7a:e5:8c:d2:bd:13:71:c0:2b:
d8:5c:40:ec:5f:fd:b5:03:60:ea:af:32:9b:78:22:0e:e8:d6:
08:35:5e:58:0a:93:0a:11:52:05:2e:b1:4d:b7:e9:6d:b0:13:
ee:24:1a:f8:07:8b:dc:6f:a5:c3:3c:c2:a7:66:8c:68:38:a7:
e3:e6:f4:3f:bf:38:2d:5c:82:dc:e6:ba:31:e8:e5:fa:5c:f8:
41:54:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:49 2026 by rpki-client