Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
File: cBtV7SDYPjSNgjfON1l5WevAGCQ.cer (raw, json)
Hash identifier: 3/8ObwlogTiYpTLwlqSsgoEw2at4RZx3g1aoNIamowo=
Subject key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8141
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Aug 2026 14:06:49 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 162.105.0.0/16
IP: 166.111.0.0/16
IP: 192.124.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33089 (0x8141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 25 14:06:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:ba:84:c4:6b:3e:55:99:e3:10:6d:b7:83:
9e:a7:c0:c2:85:48:b5:56:f6:7b:30:e1:a4:3d:fc:
d0:61:8f:69:50:7b:9c:37:69:84:78:72:a9:58:c7:
f6:a0:ae:df:c2:4d:c1:28:51:15:47:70:87:2b:4e:
21:19:32:75:c0:da:6a:02:5e:a2:b0:86:ab:48:76:
68:a0:2e:5d:0c:94:87:eb:ae:36:79:35:37:0d:47:
bf:b7:20:44:c0:e6:d2:9a:de:83:2b:8c:95:3b:dc:
ee:a3:e5:b8:79:a9:48:b8:34:e7:f4:1d:2a:ec:52:
60:83:6a:db:11:ed:7a:b5:b2:a8:61:05:52:eb:5e:
7d:bf:4f:13:b6:9b:8b:4c:96:39:8f:ad:59:97:64:
23:ae:c1:8f:60:85:22:0e:8a:1a:50:f9:df:f4:ad:
0c:5b:70:53:b0:60:1b:65:a2:fe:95:8b:6c:c7:a5:
4e:e1:31:7b:10:b3:02:36:ab:05:28:1b:d2:5e:8b:
a0:dd:2b:14:63:b1:0c:db:f7:75:52:a3:ef:f5:5a:
27:86:2d:00:42:63:f1:cd:c1:22:79:f5:91:9d:a5:
9b:de:bd:fc:19:72:d2:ad:af:09:76:97:b1:de:8f:
eb:99:ee:a5:16:43:3e:5d:dd:09:d0:97:46:0f:85:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.105.0.0/16
166.111.0.0/16
192.124.154.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a5:46:5f:57:d0:b6:c7:f7:19:82:ce:cf:5c:b6:e6:8f:c5:
58:2f:79:de:a7:d1:62:d9:e3:f0:f8:15:5c:d9:00:ea:22:f3:
51:b4:c2:d7:a8:eb:33:a3:b1:88:2f:cf:d8:06:46:a2:f3:2e:
ce:60:f2:27:15:d0:60:34:7a:8b:fe:7b:ee:e4:a4:3e:a6:1a:
2f:6c:67:dd:9a:14:13:a2:a0:74:c7:c8:9f:94:5c:5c:66:c0:
bd:0b:14:0d:51:a1:5a:aa:f6:3a:35:ea:7c:e6:f9:41:38:25:
ba:79:f9:68:8d:84:7d:16:b4:1f:7c:d4:45:90:a1:b0:e1:1e:
77:8d:d2:f3:fc:0c:df:a6:a2:0f:d7:77:37:b6:e4:bc:22:8b:
ef:0f:7e:bb:ea:d9:e5:aa:ec:29:9d:cd:ed:37:b9:ee:87:48:
1f:02:58:54:85:8a:2c:db:d7:71:7e:27:a5:6d:e1:64:f5:e8:
e5:53:df:89:4d:b2:89:aa:30:3a:a4:b5:ec:3f:e1:25:94:cc:
2a:74:10:cc:dc:e1:f9:fa:d8:15:b5:8e:ed:0e:4f:6a:a5:82:
f8:0e:d6:eb:c6:ec:0f:99:db:4e:c8:ce:ff:27:80:3a:27:ad:
6a:c0:fc:62:03:e5:17:b1:01:64:1e:bf:52:85:db:39:5b:f0:
d5:9c:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:45:41 2026 by rpki-client