Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
File: nNdxObeuQMY2CS0SiGlE3j8a_-I.cer (raw, json)
Hash identifier: 9QDHYaaaYaIof1TMXmbCiIpgRCLVgAEAQ+FN15twDwk=
Subject key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7555
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:44 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 192.58.100.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30037 (0x7555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:44 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:0b:5b:1a:3b:3e:17:45:6d:51:de:ad:2c:
66:12:2c:0f:48:2e:0a:11:0c:f2:31:9e:38:26:31:
4c:6f:b3:79:f9:21:a9:2f:b3:5a:a8:43:de:60:00:
59:10:f2:8c:bf:af:fe:79:3d:a2:7f:5b:e4:e9:f0:
81:00:6a:2f:e8:da:89:57:22:fb:2b:c4:b9:ba:6e:
d0:cd:da:ef:d0:28:b1:48:c9:df:1f:d7:3c:e3:eb:
b4:16:97:85:05:34:2a:63:02:ec:f8:d4:0c:d4:88:
c7:c6:8a:e7:e5:87:2c:58:e2:98:f4:f5:92:6d:3a:
ed:9f:a4:c2:db:3d:d0:a7:62:bb:13:7c:64:45:4a:
da:6a:d1:8a:9e:19:a2:40:9d:46:38:14:25:a0:bb:
46:95:dc:7d:46:96:ef:e7:83:64:6f:44:d7:b4:56:
2a:21:23:92:eb:5d:51:2d:38:6b:d9:eb:c9:52:b7:
df:67:a5:08:20:14:02:94:45:c5:b8:54:07:f6:52:
b7:bd:6a:17:12:58:26:dd:39:e8:05:e9:2c:5d:4f:
53:46:63:da:2d:8b:d1:ae:a9:cf:41:d1:43:8d:0f:
b7:f7:4e:15:50:25:97:fb:d0:72:d2:90:1c:8e:af:
4b:71:e8:40:40:60:5a:9c:61:7f:ca:fe:72:70:10:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.58.100.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fd:39:3e:94:92:82:94:a4:bb:86:f1:8f:04:18:3c:a7:e3:
11:23:fe:d3:86:16:15:9b:a5:ed:59:46:a4:b0:30:0f:34:c2:
80:60:64:2e:9c:73:b2:6b:70:99:a9:47:57:ef:d3:5a:a3:8e:
4f:aa:bc:99:45:c4:ed:44:99:0c:98:dd:73:d4:33:8d:cf:30:
5c:02:95:65:25:8f:7b:10:f5:ba:13:77:e8:b9:6e:df:f1:9f:
8d:4b:b6:7c:f4:17:62:57:cb:d4:11:0d:78:11:f2:07:f9:1b:
76:7f:4a:0a:27:a7:03:79:f1:0b:bb:1d:90:92:1e:b3:81:2f:
c0:b8:1c:4d:49:d7:4e:4a:fd:be:cf:c9:a5:5f:70:80:74:f6:
78:91:06:44:3b:4f:80:14:26:b5:e2:6d:3a:3d:5d:98:ea:9b:
b0:c8:7a:71:a2:e2:50:12:93:18:3d:a7:74:45:9c:a5:c2:f4:
b1:26:23:4a:9b:09:c8:b8:bd:b2:6b:fd:87:ef:08:2e:9e:f5:
6c:ea:ab:ca:bb:ef:e5:bb:e8:f5:67:1b:b2:54:27:09:ff:cf:
74:a1:5a:fc:1c:ee:7c:fe:d0:0c:87:a2:b2:93:86:b3:14:e0:
bb:b3:24:57:1b:1b:51:be:d6:18:e9:04:ba:eb:5c:5e:78:ae:
1b:a7:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:43 2026 by rpki-client