
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
File: IiZie3PlFUazvVEODioN6qglIHg.cer (raw, json)
Hash identifier: qv+43OOb7ihCBXL5/y96pH7Ye4JrJNy4tERs5kXAn1k=
Subject key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8446
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Nov 2026 12:25:33 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 138.252.93.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33862 (0x8446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 1 12:25:33 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:a9:cc:27:da:fc:0d:9b:7d:0a:1a:28:7d:
5e:8a:a1:8b:10:35:1e:27:a6:3b:bc:7a:ad:ce:c2:
7f:65:81:ef:d3:50:0f:40:0b:d3:8a:02:cc:74:35:
bb:f9:c0:75:e1:28:df:de:93:9f:7d:ec:12:3c:f8:
ee:3e:a9:e8:47:71:4f:43:1c:aa:33:18:dc:67:b9:
45:3e:5c:81:c9:bb:f0:4e:9a:10:a6:a9:3b:73:c4:
c5:29:70:87:44:0e:c4:6d:a4:34:8d:9e:3a:69:18:
62:fb:d7:c7:da:da:51:d1:9b:c2:29:cf:71:d0:a5:
18:4b:72:c4:e1:02:e8:50:1a:54:66:7f:a8:41:47:
da:e5:63:57:84:a6:56:e7:02:2e:73:dd:58:c3:69:
0a:98:8b:a0:d4:ea:a1:e8:aa:f3:bb:73:0f:04:39:
e7:15:0f:66:b2:12:35:ae:40:c5:ff:a1:12:36:50:
16:84:cc:42:38:22:92:5b:36:1e:10:05:3f:bb:1a:
b4:2c:89:1f:89:d7:66:0c:31:90:3c:2b:b3:b8:f7:
34:72:b1:ad:51:b4:74:0a:d6:fc:66:a3:25:ec:00:
02:1a:34:49:a6:01:82:bf:4f:5f:c1:4d:aa:2b:a0:
e7:e8:9a:b3:b3:a8:42:7f:f3:ed:c4:b1:8a:fb:29:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f5:38:78:54:6c:7f:dd:f9:f9:54:ef:ce:5d:85:99:62:7c:
09:7a:7d:23:80:59:33:6a:05:18:ac:4b:c2:62:78:b3:a4:f0:
2c:0c:21:8d:95:ed:37:f0:43:21:a0:90:8a:13:ab:be:c5:54:
ae:6c:1a:32:b5:1b:46:6e:b5:2c:1c:ac:63:2f:a1:5a:cd:02:
d5:fd:28:59:49:17:45:36:a3:91:6f:7d:b9:44:0d:88:e0:67:
15:47:bf:c8:dd:c8:91:b3:34:50:72:53:a5:0e:0b:0e:7c:66:
07:d6:85:52:04:30:b1:88:79:40:ac:5b:9a:36:95:f2:d5:59:
ba:69:6e:36:95:e4:a1:af:93:a5:12:8e:d0:1f:1e:fc:b3:ea:
4e:ef:ad:29:8a:9f:9b:fd:84:39:16:46:98:2b:12:4b:cb:56:
aa:fd:32:42:74:60:39:fc:00:08:bd:92:99:cc:2d:19:fd:64:
46:22:52:a6:13:57:8b:ae:3b:58:fc:42:6b:b8:e7:45:a6:6f:
d1:f9:33:d6:54:e5:cc:56:e9:88:db:d9:f3:01:4d:fb:14:e7:
d0:1e:79:0e:62:86:ae:79:b5:66:3d:33:3a:e1:f3:19:4f:57:
1e:d1:dc:29:24:43:cd:23:98:60:c6:b2:82:db:81:94:d0:60:
1b:6a:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:58:12 2026 by rpki-client