Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer (raw, json)
Hash identifier: NAMp6SgyMFCVcSK8M+LIPnhPtXFN61Kq9oJEQ97B944=
Subject key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 77E9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 05:03:42 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 205.209.31.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30697 (0x77e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 05:03:42 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:a5:40:ca:60:69:9b:a7:c8:ae:4d:30:8d:
6f:32:0a:2d:0f:33:a6:e3:56:50:4c:58:29:58:9d:
e7:c4:5b:ee:d9:a6:22:29:cf:f4:09:44:b8:5e:5c:
bb:8f:a2:a5:90:a3:c4:a7:3b:1b:f8:74:2d:44:3e:
af:d4:4b:7c:f6:ff:b5:8c:ad:72:f2:fc:3b:ec:d2:
af:c5:5a:31:76:ab:c6:3d:e3:3e:46:13:91:80:f7:
be:2b:76:e3:95:ed:60:e3:78:6f:5e:c8:eb:a1:bf:
cd:9e:d8:b4:6c:74:f5:2a:e6:da:cb:dc:71:0e:29:
ce:b7:37:3e:d6:97:9e:85:2a:62:5c:06:1b:d5:09:
fe:7b:0f:ba:f1:49:e3:58:11:b7:10:37:7e:4c:71:
b4:16:b3:8f:0c:d2:bc:e9:a9:30:91:15:cd:71:a7:
8c:c8:4a:ec:47:74:27:5f:9a:46:c0:10:69:53:da:
00:01:ce:49:00:a6:2f:40:9b:de:e6:08:7f:6c:e1:
f7:a8:22:f4:d1:c8:43:7e:37:3d:ff:f6:d0:29:8c:
28:b7:91:bd:7b:99:49:dc:b5:45:73:0f:92:79:ff:
c4:23:29:11:93:2b:31:8b:06:e6:59:ea:86:9c:c0:
3d:bb:a1:67:dd:97:43:30:a4:ce:4c:fb:f5:1e:99:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
205.209.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a2:5a:5b:bc:0f:3d:13:9d:7f:0e:01:76:7c:2e:f7:4c:ca:
27:8d:27:e2:8c:e6:28:53:a4:8e:7a:ac:cc:24:0b:d1:79:f7:
83:b1:16:27:bd:79:fa:c0:cb:f4:05:b2:c5:5d:f1:7c:a0:d5:
2c:b4:12:99:cc:02:31:44:2e:1b:7d:29:72:61:9f:98:e0:42:
25:e5:37:8b:00:bb:46:22:88:09:4d:49:e4:c1:b3:d7:b4:f9:
77:18:4d:c4:91:be:06:80:02:3a:c8:a3:0f:3a:85:6d:c8:ff:
19:4b:12:ab:d9:e1:f9:f4:8a:b5:38:41:3b:eb:9e:32:69:2f:
e9:38:53:66:8b:af:d1:2f:9f:be:37:37:89:0d:8e:ee:21:5f:
e8:cc:c4:e3:43:ca:6c:ab:0f:95:5d:d8:a8:ce:81:3a:50:46:
84:8a:dd:0b:64:ef:52:c9:0e:49:36:9a:55:0a:4b:b2:38:6c:
ea:77:7f:c8:37:80:db:3a:26:91:9c:09:02:d6:06:27:96:94:
de:1c:e4:9c:22:4e:34:6b:26:c5:dd:18:81:24:6d:93:49:10:
bd:98:f5:1c:fb:eb:00:19:e9:2d:62:b7:b7:ad:e8:5b:ad:08:
9d:2e:60:c3:5e:d6:68:c9:80:ba:34:98:e4:b5:99:97:98:d6:
b9:03:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:42 2026 by rpki-client