Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
File: juyxGYDtEVNPQZL03gjRss25Fsg.cer (raw, json)
Hash identifier: q0ZNdK2z02yDtbqecDJNepUjkSGKD15bq1Dh7+6D1MI=
Subject key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 765D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:00 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 192.58.97.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30301 (0x765d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:00 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:74:f9:af:a3:37:06:8b:93:74:c3:3e:30:
37:3a:8a:ec:85:5f:6d:b1:e7:13:61:9a:02:97:b3:
2d:8c:48:83:31:89:cf:4f:55:03:00:03:07:6a:4e:
9f:9d:4a:83:69:61:ce:47:2f:91:41:93:2c:19:16:
c5:d8:41:d6:66:37:1c:b5:28:08:eb:d5:78:6d:06:
5c:37:7e:93:08:0b:71:a6:3d:61:71:fa:fa:6a:56:
7e:0e:ab:82:cc:39:5c:50:4a:8b:02:94:4d:ae:da:
92:55:47:50:9f:de:7a:b6:70:76:6c:cd:97:14:e9:
d9:55:d5:e0:8d:58:ee:06:df:98:c3:2e:b6:fb:4e:
4d:07:86:c1:db:e6:ed:95:2d:af:65:97:17:2f:b1:
b5:e3:d5:b8:8f:40:15:cf:d5:60:5b:6d:c1:17:83:
57:08:f1:6d:3f:b3:3b:18:bb:fe:d8:f6:20:44:89:
0e:f1:49:d3:58:2b:11:bd:05:27:e3:92:90:b2:62:
a5:ad:55:9c:4d:d9:a1:f1:c5:e0:e4:3e:8f:4c:d2:
56:a1:c1:33:8c:dc:03:7a:af:ea:6b:50:d2:3f:51:
11:9b:41:6f:06:6d:33:29:02:de:f2:34:1a:fd:9f:
d1:fd:2c:b8:7f:94:1b:9b:2f:62:d8:45:b5:b0:5b:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.58.97.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fc:63:b3:f7:c3:49:8b:9d:d8:dd:a7:33:ce:88:35:18:ec:
0c:1b:42:3c:17:14:3a:ad:ce:06:18:1e:f3:a1:2f:4c:99:7f:
1e:c8:0a:7e:ea:56:ce:f2:fb:2d:a0:61:08:9b:74:40:33:fe:
20:3f:a3:06:b6:f8:03:36:8e:2c:bd:f9:5c:27:27:1a:b2:1e:
8b:a0:ea:7e:68:b4:f0:0b:ab:2a:23:1b:f1:92:b6:5e:72:ab:
a5:43:be:ef:26:db:14:80:69:d9:b1:2e:81:41:cb:32:c0:29:
ee:03:e5:eb:ed:d5:49:06:2d:47:0e:2b:31:20:00:28:d3:24:
db:de:71:42:68:f4:0b:71:d6:86:a3:6f:30:1f:34:55:cf:40:
8c:b6:fa:55:28:73:e0:28:29:05:71:c2:df:2b:db:a7:a3:9b:
8a:cf:15:42:fa:35:4c:26:09:f0:fa:99:42:4c:ed:4e:86:03:
ec:7e:8e:dd:82:3c:39:ee:0b:ff:35:a0:0e:11:f8:76:d3:be:
37:dd:f7:a9:1c:3d:6b:8a:15:f7:51:22:f9:e9:b6:c4:d7:37:
8b:ef:54:19:be:f9:ed:de:1a:56:24:56:4b:04:a3:b2:a1:d1:
a0:cf:f9:c5:db:8f:1c:43:72:fa:cc:d2:dc:4c:08:c9:31:1a:
4f:98:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:47 2026 by rpki-client