Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer (raw, json)
Hash identifier: l4/vnpqAHbqIr6UGPauALvsFO4vRyaRigAnK3qupPQA=
Subject key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 817C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 29 Aug 2026 12:25:15 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33148 (0x817c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 29 12:25:15 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:cd:0a:4e:45:52:a5:0f:80:43:b5:70:61:
89:af:61:03:c7:34:79:03:57:58:43:8c:12:05:c8:
21:be:ca:d0:61:82:16:f7:ad:49:26:25:6d:26:16:
58:c3:ed:81:6b:14:3c:06:0a:fc:01:c3:5e:a0:d5:
c5:2f:ac:50:ae:1e:1c:0a:5b:70:3a:6c:72:0d:8b:
ea:4f:44:61:9b:1a:89:c7:d6:44:95:9b:b8:30:6e:
ea:be:3d:4a:72:fb:70:57:05:1a:03:2d:d9:64:b0:
b1:f5:3a:c9:79:bc:95:ea:fc:ba:32:20:3f:0a:1a:
00:7e:ec:90:dd:5e:a0:df:23:30:3d:2a:33:e6:e9:
15:0f:45:82:0a:20:61:20:f2:f5:0b:83:60:b4:99:
cf:ae:1e:fe:e3:db:56:4a:30:34:68:82:cc:8f:a0:
2b:cd:95:63:39:2a:35:94:16:32:6b:65:1c:6e:64:
4e:08:02:68:c5:25:66:30:aa:e1:a4:0c:af:8b:f3:
c6:33:a0:f2:70:8d:e0:33:c0:79:1d:b9:3e:b7:14:
6d:ba:45:8a:96:42:4c:77:35:a8:df:0c:8e:46:c0:
60:54:a4:bb:fb:2d:44:02:ac:c5:02:0a:7f:89:0c:
07:3d:8f:dc:10:e2:70:a6:ed:b8:34:67:e3:89:1c:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.226.0/23
Signature Algorithm: sha256WithRSAEncryption
be:03:a0:1c:ad:7e:5d:3a:7d:2c:51:bf:3d:c0:63:ff:6e:3a:
ab:49:76:e5:83:e8:65:bb:5f:3e:0c:ae:22:a5:a4:05:90:5b:
47:ce:f7:05:c4:2e:eb:2e:3b:6f:f1:57:e3:76:b4:04:82:23:
91:7d:10:e3:57:8e:8f:3f:87:9a:41:1c:26:11:7b:46:64:84:
f3:90:9d:a5:e5:e5:30:22:39:94:9b:71:b7:0a:9b:5f:c0:94:
76:ad:87:7c:c7:07:14:42:03:63:86:41:9f:4e:ce:2d:f5:67:
6e:8e:aa:50:9e:71:c0:43:f8:0d:9a:ca:89:76:79:6c:c4:fd:
76:b2:84:43:f1:8e:1e:4c:a5:e9:36:8d:af:03:56:db:54:08:
01:84:fd:bd:cd:d3:d1:76:af:10:f9:14:a4:7e:c7:a9:df:33:
9a:12:79:11:67:a9:e4:8b:57:e1:44:62:b2:1b:a1:34:38:28:
aa:2e:00:cb:96:e6:df:0a:cb:10:66:20:48:82:c7:87:8e:ab:
61:54:d6:32:11:09:90:66:c0:c8:b8:95:91:14:99:cb:96:c2:
b9:a8:ca:7c:84:86:07:69:08:f7:b1:03:be:2e:9d:42:a8:b9:
1d:69:48:7c:e2:9b:1f:9d:3b:91:6f:3a:3a:3a:27:e4:29:97:
90:81:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:34:59 2026 by rpki-client