Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer
File: Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer (raw, json)
Hash identifier: Ba7CLCwJXfpV8+fkofCw/Hvx3gGW7OtSInDv1w2QY+4=
Subject key identifier: 45:DB:9E:EA:2E:F8:93:AF:FC:33:34:3A:23:20:D9:FC:B1:10:8E:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 08:46:19 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 158.182.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33185 (0x81a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 1 08:46:19 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91A1762, serialNumber=45DB9EEA2EF893AFFC33343A2320D9FCB1108E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:37:dd:e9:e8:15:33:3e:e4:7c:0c:38:11:
0c:c2:8a:15:fa:24:a5:f9:4f:8d:e8:0b:88:a6:97:
69:83:04:07:00:90:b3:a7:27:1b:97:f6:e6:3d:2f:
48:e8:48:93:02:29:92:3d:87:2a:00:f0:9c:32:01:
b4:e8:00:75:9a:47:22:3b:be:c1:f0:e1:a4:34:6e:
be:52:16:13:7d:39:76:79:50:21:a3:b6:4f:45:dc:
f9:6e:80:5b:29:6c:dc:60:0f:a9:58:e7:58:98:73:
7a:00:b9:a8:10:3a:ab:5e:9f:0e:83:7e:33:85:79:
a0:56:a3:d2:82:7f:e7:67:ab:ef:48:ae:99:36:3f:
3a:a3:f9:79:42:6f:08:4a:b7:6c:1f:28:6f:2d:9a:
20:22:c4:ac:33:3a:cc:bc:63:40:06:79:b8:08:79:
11:eb:c3:ab:7c:ae:0c:4a:f1:cc:be:6b:49:8a:86:
3c:0c:5f:01:6c:eb:2c:b0:e5:53:cd:38:3b:6e:5a:
6b:eb:10:11:4c:5c:bf:ee:a6:d8:36:40:a1:49:f4:
80:f5:7a:bd:3b:2e:5e:0a:47:e9:19:7d:25:b4:b0:
a7:d7:cd:11:46:a4:b0:ab:a3:36:ad:34:7a:b2:7a:
63:62:c9:57:04:eb:81:98:48:d4:01:67:c2:40:11:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:9E:EA:2E:F8:93:AF:FC:33:34:3A:23:20:D9:FC:B1:10:8E:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
158.182.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:95:a9:39:fc:88:2b:3b:5e:a6:c8:f3:2e:bb:3c:d6:df:6a:
2c:b8:a9:b4:fa:12:1f:6c:56:21:f6:d8:35:a9:17:8c:5d:9b:
1a:3d:a6:4b:22:53:c4:38:e4:56:c5:39:6b:dd:b5:4f:76:f9:
ee:d4:44:7e:34:86:21:98:16:0a:db:d1:7e:33:49:17:3b:1d:
0d:1d:31:80:b7:a9:e3:39:57:0f:b7:80:2a:0d:23:5d:72:45:
25:e3:71:1c:ac:8e:9e:ee:58:c9:be:b8:85:2c:35:d7:18:a5:
e9:e7:bd:17:30:a2:9a:8d:5e:0b:9b:2c:a1:b5:96:fa:d9:5e:
00:71:b4:df:52:e5:be:95:e0:32:cc:89:d0:bb:36:4d:f1:69:
51:6c:21:c1:4a:99:d9:99:5e:e9:23:54:1c:fb:4c:16:2e:46:
7c:db:53:22:00:46:a9:80:46:4e:ef:ba:5d:58:db:dd:e1:60:
b0:b2:25:45:04:ab:9e:68:59:2a:a6:3f:7c:31:bd:22:48:21:
41:a9:86:af:21:f4:ee:a9:30:59:7a:14:4b:dd:65:d8:7f:90:
aa:d8:2c:54:48:7f:4c:87:c0:21:da:1f:2a:06:9e:a0:17:f5:
3e:ba:9d:79:de:d9:f7:9b:9d:47:98:5e:0e:f9:01:bd:4f:41:
59:7c:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:44 2026 by rpki-client