Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
File: jqW5VjInwuWNQ4vBe6giUHVCRDs.cer (raw, json)
Hash identifier: htoxk0MkI+Ls45VIqHg/MI2UHhN4u6gWCL9YvAxAmyw=
Subject key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8219
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Sep 2026 13:44:26 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.238.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33305 (0x8219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 9 13:44:26 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:03:68:41:76:60:77:6b:c1:3d:61:fe:50:
51:fd:e7:a3:ec:df:19:7b:d3:dc:af:22:64:17:99:
a4:7c:84:1f:05:68:1b:da:6f:7e:63:3e:da:cb:6a:
89:2f:75:44:ff:6b:0e:db:cc:5e:f4:fc:b1:2c:0e:
c5:58:34:7f:f8:c3:63:bb:a9:22:56:19:4c:0d:fc:
1d:f2:13:1d:fb:34:75:13:e0:40:03:40:e5:94:18:
79:82:63:50:a1:fe:f2:94:a9:a2:8d:79:51:f5:c3:
39:7b:78:a5:dd:48:22:3d:f2:8c:a8:01:af:f4:f6:
7e:dd:7d:ec:e9:14:be:3d:9a:a5:7b:7e:23:4f:0b:
83:9f:f9:c0:e3:50:91:f5:9c:94:a6:81:b6:82:42:
5c:b8:d4:2b:b3:41:13:e8:3c:fc:16:af:7e:e7:2c:
56:7d:5f:93:a6:cd:7d:d6:5d:d0:c7:49:4c:c2:83:
72:87:6e:02:c6:ec:33:8e:94:85:3d:7f:e7:6a:f3:
2e:b9:0c:32:f8:ef:0c:a7:f0:66:45:0b:69:3a:ce:
04:93:1e:59:87:de:fb:10:61:90:45:12:aa:fc:9e:
03:ed:91:34:ee:80:f4:07:05:3a:8f:30:20:f0:97:
b8:77:9d:ae:3e:07:e9:ce:32:3f:b3:6a:9f:9f:9c:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.238.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:9a:86:6f:ff:9b:77:b1:15:c3:05:c3:79:d2:1f:61:77:38:
0b:d6:b8:37:8b:f1:32:0b:c0:51:a5:a2:d6:1f:1a:ba:b9:f0:
96:a6:3d:3b:61:cc:a7:5e:a0:e5:43:c5:9a:6c:b9:ff:67:95:
82:10:a6:4c:a6:6b:ab:a5:96:bb:b3:09:0b:e8:24:97:b9:ab:
94:c9:e4:4f:67:d6:8b:41:c1:68:90:f5:75:d1:30:f5:c4:7a:
f1:ed:84:17:cd:79:83:d4:4a:8a:60:b0:48:db:5a:cc:fe:0c:
bd:c9:61:72:e1:fc:de:54:2c:87:aa:28:97:87:7a:af:63:8e:
f8:bc:23:ca:97:ce:0f:7f:a7:52:a5:0c:21:f3:42:84:f9:89:
f9:df:8b:89:c9:48:ff:df:08:c6:3d:0e:4e:7b:40:bf:03:51:
7e:ec:7f:8d:23:02:fa:b2:20:4b:11:6e:c8:5c:00:2e:c7:e9:
8a:51:8f:18:22:c0:94:c2:56:67:9b:92:a4:dd:b1:fb:3d:6d:
b8:c1:0e:6d:e7:10:00:eb:94:32:fa:77:11:d5:ec:d9:cc:43:
91:1f:fd:de:08:73:9f:07:66:d5:f1:a2:9d:b3:84:63:fc:26:
8d:0a:41:13:54:cc:c0:cb:16:9c:59:4a:0e:d1:f1:e1:01:1f:
70:00:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:35:02 2026 by rpki-client