Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
File: _J3Ma6xPPZvsntHpBk2bytz5o6k.cer (raw, json)
Hash identifier: D2DN+rxRBddO/z4spN69rJV27q0qsS+x7K73jcRR/To=
Subject key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Sep 2026 04:24:11 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.186.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33277 (0x81fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 7 04:24:11 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:6c:cd:11:a5:8e:6a:b6:18:b5:76:05:68:
f3:ae:fe:35:22:9d:88:68:95:7e:6c:24:4f:52:f3:
fc:b3:c1:88:ca:1a:69:c9:ee:60:50:f1:84:c9:32:
34:52:ac:a9:b8:a6:6a:a7:4f:0d:dd:a4:81:f8:b5:
f0:4c:cc:4f:5c:ef:05:64:b3:ec:82:f8:b8:97:c1:
dc:91:f2:f3:e8:b0:d3:c4:6c:0e:83:8b:ef:72:bd:
f7:a8:62:b2:6c:9d:5d:5f:06:41:51:ce:45:cf:88:
95:ae:82:50:55:ae:7f:3a:f9:1d:28:fb:47:69:89:
62:bc:29:1a:04:68:55:08:d2:b9:7b:b6:af:c5:48:
60:2e:5c:25:80:b2:fc:5c:be:83:9d:07:2b:2a:14:
db:c5:9d:2c:05:94:43:b5:62:04:07:c5:38:92:45:
46:c4:83:f5:70:b9:e0:4c:75:82:a8:65:2e:b0:73:
6c:95:8f:0f:9b:5e:0f:f9:23:b4:74:ef:3b:9f:e2:
e5:8a:c0:78:cf:11:fc:a3:ad:e9:51:74:35:0d:35:
d8:32:a5:3d:61:73:e2:2e:00:79:81:26:88:cb:93:
b3:73:a0:59:d0:fc:f0:bc:ed:03:79:64:c3:43:24:
24:c6:fa:16:cc:1c:83:f9:1c:73:0b:16:d7:4e:4f:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.186.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ca:32:21:50:08:21:d2:6d:4c:c5:05:29:33:d9:1d:4a:d6:
c8:ef:fd:83:63:e8:4a:95:ae:a8:78:9c:98:83:df:f3:71:2b:
f0:02:bb:d5:39:0e:d9:67:93:d9:d6:b0:a6:b5:aa:5f:3a:1f:
f1:79:37:a7:1e:d5:ef:da:a1:e9:a5:d2:de:15:5f:72:28:c2:
f2:53:f7:21:23:27:22:ad:37:75:61:47:08:fd:58:4e:88:9b:
08:ad:db:02:28:9c:5d:c4:14:e0:be:bb:79:73:d0:f2:b0:6a:
35:54:50:1d:0e:a0:d0:40:2f:af:5a:86:b7:75:ac:5d:62:c4:
1c:1a:f1:19:66:99:52:fb:b2:de:46:cf:cc:de:8e:22:0f:92:
6a:53:16:8f:ae:7c:a3:b0:58:48:40:4c:19:55:88:b4:59:9e:
a1:b4:a2:c0:53:3a:58:4f:3a:92:07:be:29:99:92:9e:47:ea:
be:2a:82:6f:05:2c:d1:72:df:24:b0:c6:df:f3:81:0d:f7:74:
91:26:41:00:1d:93:58:a8:fd:89:14:43:c1:73:21:45:70:9a:
f8:43:2e:fb:43:6a:a3:e3:7e:9b:3b:ce:69:61:ae:c5:c8:91:
a2:fa:f0:65:9c:78:47:08:19:65:c9:8e:1f:33:49:ea:52:31:
0b:33:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:53:38 2026 by rpki-client