Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.cer (raw, json)
Hash identifier: Hu1Ll32oN8jR7TEBXcf3aa9mZWPr688xylTAvuKWTHI=
Subject key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8270
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Sep 2026 13:23:21 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.188.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33392 (0x8270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 18 13:23:21 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:05:25:23:3a:2b:5d:32:8b:e0:d6:5c:c9:
c5:e4:c2:1c:fc:d2:3c:46:b3:cf:dc:8a:e7:3d:c3:
aa:d3:fb:b2:df:42:cb:98:ce:69:1b:b3:05:7a:39:
e3:23:23:56:f8:7e:0e:63:3b:ab:e4:e7:37:ad:22:
fc:75:8b:78:20:6d:2d:db:69:1a:8c:e4:df:6a:99:
f7:67:d0:ef:12:03:9b:7e:b6:00:f1:17:05:8a:b4:
f7:fa:fc:3c:56:aa:54:0e:be:c9:5d:2f:ae:9a:94:
6b:b8:fd:96:21:04:14:23:7e:5c:cb:18:eb:89:64:
4d:08:fe:8f:41:45:85:3a:85:56:57:a1:46:07:5b:
59:6a:2a:9a:a8:94:f5:3e:04:0d:5f:4e:48:fe:64:
7e:6b:55:dd:f9:69:88:0b:76:0c:eb:ed:67:ff:b2:
42:b2:fe:c1:03:0a:d8:6d:ae:29:d1:56:43:bf:aa:
be:f7:69:16:ab:e7:e9:97:97:d3:f0:87:6c:3a:b1:
51:1f:19:e5:54:f9:8e:08:02:85:d3:1b:3f:38:c7:
37:0a:33:c4:88:c0:69:36:0b:90:7b:58:ad:ce:cf:
df:ea:41:5b:93:e2:f8:90:12:d2:fe:a0:22:bc:bd:
76:a3:de:1f:df:a1:36:6c:28:9c:0a:30:10:f3:c9:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.188.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:52:f9:8a:f4:0c:19:d7:96:d7:2b:de:1b:ac:43:e4:8a:16:
08:f2:f2:6d:9d:81:a3:16:80:c8:39:52:28:5c:13:9a:f0:48:
ac:c1:8d:ae:1d:84:23:74:e8:5d:6e:bd:91:18:02:be:ae:7d:
e4:ac:ea:22:55:a2:31:37:4d:20:d7:c0:60:54:5b:65:0c:38:
9f:3b:1a:ad:39:39:c8:03:ef:f0:e1:6f:d1:0d:93:82:6c:77:
6d:81:82:10:28:20:98:65:d0:3c:76:85:34:6f:8c:f5:2b:55:
66:b8:fb:fd:58:79:78:55:17:66:0f:fc:24:75:8f:0c:e0:fb:
e4:d9:31:3a:a5:69:80:99:d4:34:74:58:0d:54:0b:8f:c2:12:
c0:cb:60:cf:36:98:1e:fd:07:e5:0b:e0:58:bb:05:2f:31:0b:
22:a7:ac:91:c2:e4:5d:b8:c2:94:46:cd:a7:d8:27:75:12:8a:
bd:e7:ca:b5:c6:9c:75:a0:bf:bc:3c:af:b0:b4:b7:3e:5b:a9:
0c:42:1f:5c:84:49:10:8e:5c:4c:8d:7f:dd:40:52:03:52:30:
bf:51:8a:7e:02:bc:c8:e7:0c:b6:cd:de:df:18:34:f4:73:b8:
99:e1:a6:b6:25:6b:be:a8:76:7a:76:31:aa:f3:c0:07:61:8b:
8f:82:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:19:43 2026 by rpki-client