Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
File: XZRtT0edN7zhcAywut1RosPfYg8.cer (raw, json)
Hash identifier: brs2ZtGTYX2XGYaPorXibpKPATKVjaZUMU3fkFWS/0I=
Subject key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 12:57:20 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 157.20.65.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33215 (0x81bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 12:57:20 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:ed:e1:07:c1:fc:a2:86:23:86:3d:fd:e5:
6b:4c:9f:97:d4:be:2d:56:7e:5b:b1:f1:7f:2c:20:
85:39:ad:08:a6:3b:cf:94:f0:0e:66:49:fc:f0:4e:
6e:dc:5d:44:cc:43:e7:d7:56:1c:ff:4d:ef:f3:bd:
ce:d3:b4:30:c7:6a:75:ce:00:23:1d:5a:6b:3a:15:
28:27:d6:d9:b0:40:14:9f:53:3c:03:a7:06:f9:57:
eb:b0:53:b5:5f:02:9c:91:c1:23:8e:fb:19:ec:bd:
97:d3:77:45:f3:52:1f:28:17:1b:d8:ef:1c:73:96:
0d:76:4d:e4:d9:82:80:0d:d9:7d:65:c1:1c:8a:d9:
29:e1:51:a0:cc:50:d0:75:d2:12:7e:89:94:ec:80:
fa:d7:2a:2a:3c:f1:a5:18:1f:6b:de:1a:f8:2c:3c:
10:ca:83:ef:52:da:cf:10:e6:ad:4f:cf:09:ad:b6:
75:f8:d6:3d:bc:50:d0:7a:1b:e5:bf:bc:1b:ec:84:
51:44:5a:7f:6d:bc:5c:30:a8:e4:55:12:ff:0c:a0:
61:8b:4f:82:5c:03:45:54:32:f4:82:34:f7:53:36:
4d:45:d2:76:45:70:df:68:9d:2b:f5:47:69:55:09:
86:f0:71:cd:89:25:fa:b6:7f:76:c2:e1:12:03:8e:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.65.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d6:f7:51:e1:a8:a5:23:4c:bf:34:1c:d6:f4:92:a6:24:8a:
23:2e:41:33:40:28:85:27:cc:ec:78:f0:d6:c2:e0:31:6a:69:
6e:e9:f4:3c:9a:73:2c:07:f5:aa:0f:b8:55:0c:54:41:35:10:
10:c6:1c:29:e2:b7:57:2c:55:bd:b3:d0:e4:3a:82:ce:9a:e6:
c7:9b:3e:4e:aa:1f:b5:97:54:fb:86:da:18:2c:29:c8:f0:d5:
1a:66:26:30:2e:bc:e6:ef:8e:83:bc:97:4b:bf:6b:7b:39:da:
19:e5:35:f7:4d:0b:75:03:eb:8a:fd:03:b1:e2:2b:1d:a2:95:
e1:c0:14:e0:e9:4b:59:7c:6d:4f:4f:8c:e9:a2:16:99:f6:21:
c5:ce:2b:4c:bb:5f:bf:ed:d9:f3:6c:d5:c7:b2:de:ce:2b:d7:
24:12:d6:23:ed:d1:c4:a9:16:06:e4:69:45:e0:ff:b5:e9:4e:
5e:92:6c:63:ce:36:be:5d:e0:4a:88:41:60:e8:90:3f:0a:19:
be:a0:db:82:93:b1:7e:72:62:b1:0a:1a:bd:11:13:5d:15:31:
b0:b8:7b:12:9f:37:cc:ca:84:7c:7c:ff:4f:8e:2c:53:f1:6b:
df:20:a4:c2:59:2b:cb:a1:9c:c0:1b:d7:07:e3:a1:0f:67:f1:
97:b9:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:33:56 2026 by rpki-client