Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OjqjPnfKLWZmK9fBd84f1cKUkCk.cer
File: OjqjPnfKLWZmK9fBd84f1cKUkCk.cer (raw, json)
Hash identifier: 0+aOdkBdhFJuqa5bKKCRM6dumhdPkfvYZ0c7/6L26E0=
Subject key identifier: 3A:3A:A3:3E:77:CA:2D:66:66:2B:D7:C1:77:CE:1F:D5:C2:94:90:29
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 83DF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918BDD5/C565945ACE8811F18E0E151AF865CEF9/OjqjPnfKLWZmK9fBd84f1cKUkCk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918BDD5/C565945ACE8811F18E0E151AF865CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 23 Oct 2026 02:23:48 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.141.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33759 (0x83df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 23 02:23:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A918BDD5, serialNumber=3A3AA33E77CA2D66662BD7C177CE1FD5C2949029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:fe:74:03:0c:d4:a5:70:9a:74:85:5c:ca:
98:f5:2c:1f:38:d8:c8:8e:c0:62:53:0f:cf:62:84:
61:48:e5:51:35:80:5e:1b:ab:c2:6e:9f:f1:b0:65:
ba:13:65:79:4c:b7:03:4c:c1:bc:7e:40:f4:b2:74:
92:8f:a1:95:55:e2:78:ac:32:8c:b8:bf:09:b2:a2:
7f:df:1b:80:ac:89:aa:f5:f9:c3:45:a9:8c:15:f5:
20:9e:02:1c:4a:c8:5b:a4:15:5e:35:3b:a3:a1:71:
c3:0f:33:e9:cb:37:25:50:ab:97:02:84:54:77:4d:
fd:b5:44:ad:6b:93:8e:16:8c:99:8a:50:7e:21:30:
f7:b7:31:10:f1:a3:29:ca:58:99:77:56:22:69:10:
06:3c:35:61:60:97:88:5b:cf:14:6d:57:26:d1:99:
94:01:e2:65:48:dc:00:ba:6a:a3:36:27:bf:6a:bd:
d0:9a:69:1f:71:25:09:21:a1:f3:c3:ff:5f:62:4c:
3d:a4:1d:f5:01:3e:f9:16:b9:f9:2e:af:6c:2d:3f:
56:e9:26:78:39:c3:86:77:af:6c:cb:bb:cb:0f:30:
e6:da:86:8f:f0:df:47:60:d3:30:88:17:6d:9b:e6:
14:b6:8e:ae:a7:5f:e4:c6:64:4a:67:99:64:d4:68:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:A3:3E:77:CA:2D:66:66:2B:D7:C1:77:CE:1F:D5:C2:94:90:29
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918BDD5/C565945ACE8811F18E0E151AF865CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918BDD5/C565945ACE8811F18E0E151AF865CEF9/OjqjPnfKLWZmK9fBd84f1cKUkCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:30:5e:6f:33:35:5d:5a:fe:ce:4f:04:99:6a:a6:9b:1f:85:
56:65:45:80:4c:57:30:57:ed:86:e7:08:04:68:89:63:b8:19:
d3:69:7d:22:84:44:62:ba:90:4b:c8:18:d0:0d:c8:c5:aa:45:
a2:78:b6:ca:92:1d:e7:3f:27:0b:66:12:27:13:aa:15:43:ae:
e5:ae:1f:28:28:9d:7c:9e:a4:39:8a:d8:24:48:e2:70:8e:83:
ab:08:76:70:fa:a5:16:4b:90:a2:9c:76:ac:21:6d:8d:86:af:
b8:d8:fd:f1:9c:87:92:28:f2:43:6c:9e:1d:53:f5:7e:e4:76:
f3:7a:11:2c:61:64:04:81:4c:ba:03:a7:86:61:60:c3:74:ab:
2b:7b:4e:80:02:62:68:76:f0:77:ff:29:16:d0:9d:89:b6:d7:
c9:87:7f:ed:ca:ce:8e:20:a6:a5:7f:47:17:a4:9d:7e:e3:d6:
dc:3c:5d:e4:00:75:a1:91:af:aa:8c:1c:8c:d7:c5:38:4d:6b:
9f:29:1f:3f:33:4f:e3:69:50:f6:d5:2f:a5:28:2e:2b:cc:8c:
22:b4:ce:cf:e6:7f:69:3d:ad:6b:27:fa:f2:e6:a1:b8:c7:19:
4d:e7:bc:f4:c5:03:42:26:0f:39:84:c2:34:99:34:af:e3:e8:
b7:b5:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:34 2026 by rpki-client