Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.cer (raw, json)
Hash identifier: iRHWkjMO96iMsikZ4d1Lh549N3pboYsrIT0r5viKNzA=
Subject key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8024
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 15:12:20 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.213.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32804 (0x8024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 3 15:12:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:f0:6e:2c:f7:c9:77:e3:3f:37:c3:65:97:
04:b8:02:3e:6b:fb:06:a8:b4:3f:b1:49:f4:13:af:
42:95:5d:df:18:77:5f:be:c3:5e:73:3b:e3:e8:5b:
18:6f:48:d1:ab:5a:a7:39:ac:40:5a:b9:37:3a:0b:
d6:21:65:6c:c2:6a:a6:23:d6:a7:26:95:de:34:00:
28:f0:79:00:81:c2:14:b4:1b:65:b1:11:9b:90:32:
cb:ad:de:e9:c2:38:9e:23:9a:4b:07:3c:80:e3:6c:
09:b9:d3:5b:ce:7c:d7:ef:4d:99:09:2b:6a:2f:14:
b9:81:29:fd:c3:4d:52:d1:d0:37:b5:0f:bb:de:44:
1d:cc:0f:4c:41:f8:6b:1d:6a:2a:b9:ee:7d:eb:ef:
46:85:7a:13:f8:d5:dd:1a:83:7a:7a:5a:5a:29:d6:
a8:ae:c7:82:77:6c:f6:0d:31:d6:7d:38:12:2c:aa:
fd:3f:a3:61:6f:50:e6:7c:d7:42:f2:94:b2:0f:96:
cd:ce:90:1c:34:ed:68:f5:bb:a5:98:3c:4c:83:2d:
56:3f:c9:ff:42:8c:a8:42:5e:61:cd:82:a3:12:f5:
10:ee:1f:eb:8d:4e:a2:2d:48:fa:72:07:e6:60:ea:
d5:4d:b4:6e:ce:9c:bc:91:55:e8:9d:49:3b:5a:84:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c1:8b:3e:e0:d5:db:29:96:78:2a:f7:5a:8c:76:c6:be:b1:
d2:01:c4:bf:e9:f8:17:69:50:ad:94:76:c9:7c:d5:e2:fc:30:
5a:db:a9:42:88:28:08:d0:e2:0b:87:39:a3:97:00:8c:ff:47:
89:83:bf:36:c9:e5:32:cb:cc:6a:ec:db:ec:b8:91:51:a6:e0:
8b:cf:65:d5:8f:58:0d:38:86:c0:7d:12:fe:26:ab:9c:74:ba:
40:57:13:25:27:f2:d6:14:6e:56:1f:71:68:33:73:93:2c:4f:
42:85:ca:d0:88:d2:55:56:2c:bc:b9:f3:c2:d5:aa:c9:9e:da:
b9:d5:e8:7c:d1:53:29:fe:5a:2e:b0:e0:38:64:96:ea:74:04:
72:94:75:6a:e3:30:22:8e:4d:c9:f3:8f:1d:e5:9e:48:69:29:
a9:4b:5b:c0:d0:de:ec:b6:84:d2:75:8d:00:4e:72:90:98:28:
ae:14:03:cf:e0:52:b4:c0:05:dc:51:7f:d0:56:a3:3f:e9:40:
2c:cf:66:23:80:3d:a8:d1:dc:40:11:ee:d5:e1:46:19:8e:82:
43:0a:b2:56:ca:2d:0e:4b:e7:ea:ae:0b:45:fe:71:01:43:49:
1b:f7:66:fc:db:d5:56:43:86:45:24:e1:d6:1b:64:cb:92:b7:
0c:6c:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:46 2026 by rpki-client