Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
File: piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer (raw, json)
Hash identifier: PbGU7KQeDfP5Gt8lKT2dcP2rmuvNc7hDs26wWHtC3vQ=
Subject key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 83F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 Oct 2026 13:19:59 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 155.35.1.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33777 (0x83f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 26 13:19:59 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:ee:56:01:db:eb:53:2d:cc:a7:e6:0d:eb:
01:e7:bb:cb:c7:17:d4:e5:2f:86:55:18:13:32:ee:
2a:10:6f:f1:ce:23:71:2d:7a:be:0c:fb:e1:66:a2:
70:24:4c:e3:24:e9:55:2e:fa:55:51:f1:45:40:65:
48:b7:af:9f:19:37:a6:c2:93:66:2f:c5:64:03:73:
73:4a:9d:f0:a4:2f:14:e7:de:0a:93:09:7f:48:54:
3a:4d:b3:8e:7b:4a:70:0d:2b:23:8e:cc:be:32:72:
91:29:5e:49:5e:7a:ee:f6:bb:b7:22:c0:db:4a:62:
a0:d8:41:f3:c6:45:d5:21:82:22:45:6b:70:94:dc:
77:07:bc:c9:fe:9c:05:15:05:6b:88:41:e7:99:1d:
1e:26:87:9f:be:d0:a0:7e:6b:60:24:7a:b6:a7:fb:
80:e0:a1:27:03:03:f8:8c:ba:01:71:49:96:06:6c:
13:fb:89:27:d5:ee:6b:82:7b:e3:05:80:af:49:f9:
53:ca:e3:43:da:41:0e:ad:3b:e6:4c:e7:f7:72:9e:
ac:aa:f0:8a:1f:5b:d5:df:d6:cc:c1:73:b4:7b:7c:
c2:e1:69:d2:91:48:f5:1a:6a:4b:94:37:73:97:24:
89:fe:f4:62:ac:c4:58:4d:8e:2f:95:10:9a:44:42:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.35.1.0/24
Signature Algorithm: sha256WithRSAEncryption
37:68:52:8e:02:ab:be:c0:58:74:20:6e:2b:90:15:c4:5c:8f:
e6:50:c8:c0:14:9b:9c:95:43:79:42:c3:8f:8a:89:4a:bc:24:
53:56:7b:4b:7e:98:e8:62:71:e1:41:8f:3b:74:69:7b:d6:78:
94:42:48:2a:b1:82:4a:b5:fa:5c:c1:38:e7:30:b6:6f:9d:69:
24:92:bd:75:8d:bd:c8:a2:da:6e:6f:24:38:e1:ee:de:0a:29:
9f:3c:bd:46:f1:8b:f1:f8:8c:70:35:f6:69:94:37:ae:eb:99:
a2:85:e8:e6:7b:66:22:ec:bd:f4:12:d4:27:f0:96:c2:59:8e:
37:0c:cb:77:9e:c7:82:56:2e:0a:36:73:40:12:f6:2d:d3:24:
1a:fa:af:f7:89:74:5b:8f:97:30:ee:1b:56:0d:df:08:b3:05:
e7:10:26:2f:d2:6b:a5:16:61:10:cb:95:e8:a5:66:f6:0b:83:
73:3f:ac:ff:4c:76:4d:91:70:ce:4c:29:e2:ac:9a:1c:10:d0:
a8:47:32:8f:9d:97:2d:31:ba:d1:2f:31:ff:41:34:1f:0c:d2:
b7:cd:a5:5d:99:b1:37:86:b7:5a:78:0a:c2:8b:0f:02:3b:e2:
93:ef:b9:e3:fd:e8:64:4b:18:08:f8:80:1c:5e:b3:d3:f8:6c:
b4:e0:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:01:25 2026 by rpki-client