Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
File: nB5FqAhMMR3VAEShc2BejuPEzJU.cer (raw, json)
Hash identifier: boaBCSXaqF4K9QHNRo5zkfa1/9q71dJIttzQIMvAmkc=
Subject key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 803D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 08:50:43 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 192.51.174.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32829 (0x803d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 08:50:43 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:07:ae:f4:40:2c:d9:8e:57:97:8b:3d:e1:
36:f1:75:4a:82:03:1f:81:30:56:4d:51:4b:f5:ae:
6b:82:49:8c:9e:4d:06:c4:95:09:b0:b3:a4:cf:d7:
5a:24:bf:10:a4:49:77:28:b9:cc:7f:fb:54:79:3e:
c3:87:ed:2d:e1:84:04:86:93:67:98:84:44:e7:f1:
cb:46:62:4e:50:4e:93:35:53:8e:9d:ce:b1:3e:b5:
41:32:13:49:0f:22:d1:33:37:e7:d2:29:43:e8:8b:
17:4c:19:c0:5c:98:66:1f:d1:e4:86:34:b5:b4:80:
72:8a:9a:56:7a:65:30:30:1e:b9:b7:e9:10:92:8c:
ae:15:80:47:21:91:0b:2f:d1:87:b2:ad:00:8d:88:
ca:3f:73:33:b2:9e:54:58:a3:b9:18:96:ef:08:26:
3d:33:57:12:9e:db:bc:fd:c2:67:18:2a:2d:fd:6a:
c9:9a:85:68:1a:5a:32:bd:55:c5:4e:29:ce:f9:87:
ea:e3:da:fa:8d:5d:35:92:3b:14:fa:78:56:04:37:
68:30:69:46:b7:8b:c2:31:6f:07:85:85:9a:26:97:
cc:af:93:fe:8d:1b:45:ea:b9:89:10:c4:01:be:d5:
cb:49:a8:06:81:af:81:d6:dd:f1:5d:af:5d:15:39:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.51.174.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:3c:ce:78:bd:21:48:36:7f:8c:5d:4c:04:80:ce:4c:93:
85:2d:82:04:45:dc:3a:46:07:f0:7f:c5:ba:38:89:84:78:1c:
8b:24:09:fb:58:73:73:2c:a7:77:22:15:bb:2d:89:e1:5a:5e:
0f:54:3e:7b:db:30:ab:06:b3:10:56:05:cc:35:ae:f5:dd:e6:
56:01:3c:97:3c:45:9f:e7:35:f3:04:77:27:08:2c:d6:8f:1f:
b1:58:b1:94:ea:5a:9e:d3:93:39:bd:ae:55:62:1a:7f:39:f9:
ca:27:da:10:9c:22:a1:45:52:83:54:78:f5:0b:89:fe:1e:9e:
3b:d6:b8:e6:c9:f5:83:15:ff:bc:97:5e:14:ea:c9:0d:7c:bf:
59:a0:3b:7c:16:e8:d0:34:d3:76:3c:4f:92:c2:c0:9a:c3:32:
4b:8d:c6:93:bf:bd:a3:73:37:1c:87:b4:30:08:8f:2f:ff:34:
75:cc:4d:2b:66:ba:67:53:bd:71:ae:ca:68:ca:c3:c8:6f:21:
00:f6:a4:85:2d:a1:ab:98:40:7f:c7:ad:03:05:31:8e:ff:5a:
bc:da:3f:1d:35:71:eb:11:fa:70:7c:3f:4f:53:7f:7c:ca:83:
81:77:f4:24:bc:96:55:49:d0:af:ae:ae:f5:b9:0c:75:71:ca:
d8:27:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:14:46 2026 by rpki-client