Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.cer (raw, json)
Hash identifier: 2VJR9F/8dxJHckqSggjAx2c8n3FcGO+yJIbPjjEIumk=
Subject key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 14:35:58 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 139.190.0.0 -- 139.190.95.255
IP: 139.190.192.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33225 (0x81c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 14:35:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:6c:49:b7:2f:1e:aa:b7:09:9a:aa:51:22:
68:22:c8:8f:fd:ae:b2:29:fe:97:0a:4a:b0:1e:7b:
44:40:3c:db:6f:39:c6:8b:eb:65:40:40:9e:6f:26:
45:c5:4e:42:a2:2b:5e:b3:8a:1f:9f:56:16:75:a7:
10:dd:c8:a3:19:25:af:fa:33:4a:0c:b8:5f:73:a4:
cd:6f:5b:40:6b:f0:a1:36:2d:08:a3:e6:81:78:7f:
d8:4e:16:ed:8a:34:13:a5:bd:33:19:87:b5:9d:73:
2d:93:35:c9:f2:53:9b:e4:36:99:3e:20:4f:30:9b:
a0:22:ca:fc:3c:ee:15:cd:d9:b1:c2:f1:7d:9c:90:
08:bc:f1:4c:37:0b:36:fc:50:55:6a:cf:de:f2:b4:
ca:96:78:51:c3:35:a2:d1:43:71:fc:8b:1a:1c:aa:
c6:db:04:2d:11:60:a8:e0:d2:6b:3b:26:65:38:68:
9b:d0:c2:6e:ac:ce:6a:c3:bd:95:0c:8e:d4:50:86:
88:bd:45:67:4e:b1:5a:db:a3:a3:8f:69:7f:bd:ab:
2b:2c:58:9b:17:a8:76:fb:02:6a:6b:98:f7:a1:55:
86:6a:b5:c5:52:e6:06:ae:7c:4d:a8:78:b0:0a:8b:
48:79:0a:7d:dc:13:32:73:1b:05:21:06:81:d7:27:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.0.0-139.190.95.255
139.190.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:90:02:3e:b3:9c:cb:dc:6a:77:dc:84:f8:45:ea:f8:3a:ee:
2a:7a:7c:76:6e:fa:62:5d:7f:5b:22:2b:58:eb:ec:ff:d7:8f:
9f:5b:24:f5:63:2d:17:65:29:89:96:89:5e:1e:0c:a5:d8:d3:
ab:74:f8:ef:0b:63:c2:4a:2c:b9:7e:48:70:8e:5d:75:0c:46:
ee:55:45:9b:02:5a:fe:8e:a1:cf:38:c4:97:4a:65:03:e9:8c:
70:e6:ed:dc:2c:8e:50:82:cf:bb:1f:8d:a6:5b:36:e0:fc:b4:
86:40:64:9a:83:6b:d2:bc:7d:51:67:57:df:65:6f:5b:22:53:
c2:24:b7:60:69:e9:15:3b:74:c3:b7:2f:16:bf:52:80:34:ca:
56:20:29:ff:62:8b:19:b2:1e:8c:0e:9e:5f:72:3a:65:67:88:
95:9d:f4:e9:c3:f9:75:26:67:8d:e8:5a:40:f0:2b:92:ac:71:
34:4d:0f:c3:90:3b:20:38:6e:80:3a:d6:49:a0:de:f1:d9:5a:
0d:57:ea:52:0d:9b:7c:30:48:16:d6:53:14:d9:18:99:06:b2:
fc:4e:d1:fb:ef:f9:79:c9:2a:4d:37:19:c7:22:6d:1e:7d:25:
31:68:63:45:a5:57:35:03:47:4d:53:94:e3:79:93:85:0e:43:
52:d9:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:14:36 2026 by rpki-client