Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer (raw, json)
Hash identifier: mQfWh8BX9NVD5N7qKLfXcM1whFNwBjpF4xugjbkQg4Y=
Subject key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80CC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 13:12:47 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.220.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32972 (0x80cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 16 13:12:47 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:7b:12:56:38:d8:82:34:22:53:5d:2d:0a:
52:a7:c9:a7:cd:24:e6:16:1f:6e:af:de:39:1e:24:
03:43:29:4b:41:34:db:5c:26:2a:90:81:ae:c9:67:
7f:e0:e5:7c:a6:71:ac:d2:cf:af:23:cd:4d:83:ae:
44:eb:cb:28:4e:ce:c8:4f:ed:7c:41:76:9a:98:af:
ad:4c:38:3d:89:c8:79:a4:1f:f7:2d:69:ef:b7:4e:
bf:e7:74:35:52:19:53:2b:c2:7d:6c:60:87:f0:7d:
55:a8:8f:7d:49:39:85:03:09:94:2c:d4:b6:ba:af:
09:1c:5f:93:75:dc:c6:fa:be:1b:74:d9:ba:b2:36:
12:cb:a2:a8:54:65:a3:82:de:42:7a:86:28:6f:f2:
58:ca:48:55:0c:c5:7f:da:6e:02:1f:3a:12:3b:0d:
4b:3f:fc:b1:7a:f4:3e:07:ac:59:84:f2:eb:ff:ea:
03:eb:33:5d:07:15:75:75:0a:44:b9:44:ba:fe:f6:
d6:14:9c:86:de:95:6d:07:12:05:45:5a:e0:15:ac:
13:38:90:b9:7a:81:39:fe:ec:f7:06:1d:f4:51:ab:
dc:79:10:17:86:6c:54:08:f8:76:57:77:2d:bc:60:
77:72:85:bc:1e:e3:83:e4:cb:29:03:f7:46:ea:8e:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.220.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:9f:21:a2:f3:f3:ec:20:85:bc:60:b3:76:e2:9a:7e:c8:cf:
7c:7c:49:d5:ff:54:44:03:72:12:6a:cf:48:3d:34:8a:73:0d:
96:78:d4:4c:14:05:20:71:0e:3d:ac:00:43:95:9f:d4:c8:83:
c9:40:86:fd:3a:b9:81:cd:92:63:55:43:6c:a7:67:b7:03:fa:
f6:a1:3e:57:e3:b4:6b:62:68:0d:20:64:80:a7:53:eb:1c:5d:
18:9b:5e:6f:d6:aa:ea:7c:43:42:93:2c:8b:b0:bc:b7:17:35:
13:3c:99:e1:08:89:b9:19:20:91:5c:e9:0d:a6:a0:6f:0c:c6:
8e:b0:8a:0e:bc:7d:28:d6:a9:63:f3:d8:50:af:f9:8c:1d:48:
4e:58:db:6b:8c:c2:16:d9:88:2f:64:49:ad:fd:24:00:d6:0f:
bf:56:63:75:45:3d:c9:20:f8:92:f1:42:ef:21:85:ea:62:e4:
c5:38:dc:71:41:08:2a:f8:21:bc:e8:79:cb:53:45:ca:02:29:
7a:1e:eb:e1:33:e7:dd:2e:2b:14:7e:82:bc:66:f1:9d:81:61:
ba:f5:11:0d:63:9b:c2:4c:02:6f:a0:45:7f:71:ed:48:85:33:
50:c3:37:14:3f:7d:6e:6c:e2:95:48:9b:d5:ba:99:c5:c8:18:
e5:cb:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:37:34 2026 by rpki-client