Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer (raw, json)
Hash identifier: jFJhMk6Gg6INY7CjlHBC6SWBwpxGXKomkGIZV/NkR3g=
Subject key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7CCE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Jun 2026 08:02:45 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 198.49.32.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 10:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31950 (0x7cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 11 08:02:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:7f:e0:4f:05:c1:69:08:c1:25:60:b4:42:
56:52:15:99:95:be:58:33:94:a7:61:3f:ed:58:3d:
32:0a:ab:fb:fa:a3:50:4b:94:94:de:ad:16:9c:0c:
47:b4:d5:63:a1:30:bb:a5:76:a7:65:29:86:ee:c5:
4d:41:a2:a7:26:e3:53:36:c1:27:83:02:38:49:52:
13:8d:f8:42:af:29:21:f3:9d:58:46:cb:21:33:71:
72:91:9c:d8:b2:ea:44:23:c3:3c:41:b1:62:52:e0:
6c:50:12:16:be:86:dd:4d:ec:67:32:f1:3a:f3:2b:
d2:69:ed:81:e5:5a:a8:a1:29:a7:31:16:7c:32:20:
b8:0a:c2:ea:c4:19:50:70:1f:80:89:73:ac:fb:06:
bc:2f:41:04:6c:d5:d1:ca:b0:d2:be:49:92:d6:df:
63:f2:26:49:a7:a4:80:50:32:d8:3c:6e:60:c6:23:
00:7d:bd:61:ec:9b:91:15:d8:4f:cb:b6:f2:9a:f1:
c2:13:15:1c:14:f8:f7:7b:c7:c0:a8:cc:4a:6e:e6:
c4:f0:54:04:89:07:1a:d3:7d:d7:cd:85:e5:73:51:
f7:e8:a7:61:18:55:0f:8b:cf:09:87:37:b3:1f:06:
8e:99:f9:29:5b:14:64:ef:3b:f5:31:32:81:b3:4e:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.49.32.0/21
Signature Algorithm: sha256WithRSAEncryption
71:fa:b8:ed:99:5b:1e:3b:fc:9e:56:9c:61:3b:26:a2:f6:83:
57:fe:1f:69:09:42:c2:b4:ce:ba:f9:1a:b7:2d:7a:fa:74:85:
fa:cc:31:6b:84:39:66:4b:b4:5c:f7:ae:dc:8e:56:55:39:59:
64:b8:71:7b:e3:43:17:64:c6:0d:4d:95:27:45:4a:e2:8c:9f:
78:d9:01:bb:ec:00:7f:27:cd:3e:61:d4:57:cc:52:76:92:bb:
c8:d7:35:e3:35:59:a2:fd:be:c3:a5:a2:7f:68:2d:9c:02:5d:
f9:b8:b4:0d:3b:be:ce:d3:09:13:be:b4:16:b0:34:d4:e3:57:
87:c9:28:24:e8:4a:9a:3c:5b:15:5a:3c:ad:49:91:f4:fe:cd:
72:05:e9:93:a5:30:de:36:e4:56:b6:f7:37:e1:ba:b0:0a:78:
53:e9:c9:7e:d8:42:01:04:fe:97:9c:5b:cc:13:31:49:f1:39:
2f:54:b0:46:2d:9c:db:af:da:10:44:4b:3c:8c:f6:6c:6d:0b:
48:7e:c1:15:5f:ca:79:e6:27:bd:11:e7:5c:da:00:c9:fa:24:
5e:cc:e2:62:5c:04:22:9a:e5:a3:4c:7a:a8:ab:57:02:50:db:
81:07:6f:c6:57:ce:cb:10:d2:27:d1:a6:a0:e5:31:2f:4d:33:
34:f4:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:00:30 2026 by rpki-client