Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer (raw, json)
Hash identifier: h8DziogMHy+10UOpdrEVFP9uZLXJxt2X8ZRQJwK//gc=
Subject key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80CE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 14:16:08 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.8.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32974 (0x80ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 16 14:16:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:a6:cb:15:7c:a7:6b:0a:ce:de:4e:b8:02:
97:3f:ce:1f:79:10:8c:f6:b3:83:b3:a8:9a:44:42:
8f:c9:f5:8e:9d:68:27:9c:04:91:1b:be:55:7b:c6:
74:46:71:77:c0:c8:e6:d9:fc:9b:67:30:7b:57:fd:
8d:e3:b6:79:56:6b:b4:d4:f7:35:f7:02:5b:79:2c:
4a:0b:70:ca:ed:f2:94:fa:bf:80:7b:0b:c8:d8:4d:
83:71:74:41:c4:18:d0:82:b0:4f:aa:f8:2d:ab:1c:
68:88:b1:14:03:62:5b:88:73:5d:6f:14:48:85:6c:
4c:f1:b2:d8:a8:d3:3a:54:73:54:3e:38:76:e1:82:
e0:81:53:92:a1:bf:92:4a:c1:ca:c9:e5:cb:c6:7b:
a9:36:d3:4d:47:ab:51:e8:fa:9e:0c:6f:b0:8e:42:
81:6f:01:75:36:d9:bd:8f:96:ba:2a:90:ed:41:46:
47:31:1b:6b:c0:0b:08:0f:7a:d3:7e:8a:98:9d:51:
17:6d:05:37:b0:b4:85:7c:c9:da:d6:fc:0f:45:77:
c6:06:27:f4:ed:06:f9:1c:47:08:d6:ea:b1:81:0d:
9f:7d:14:1c:23:59:b8:29:5f:6a:f1:83:55:2d:7d:
9a:ec:ca:03:f2:3a:fb:70:7f:e7:5a:51:f5:dd:2e:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.8.0/23
Signature Algorithm: sha256WithRSAEncryption
54:5e:0c:34:bb:3b:a3:c1:af:40:43:9f:12:4e:7e:89:c1:c6:
55:68:11:2c:14:23:f5:33:17:c3:ec:e4:50:f8:b3:6f:b9:fa:
b9:59:42:0f:6b:4f:bd:e2:1b:3a:e0:bb:2b:61:20:36:2e:e4:
11:51:e2:28:14:d8:91:13:43:f6:45:32:68:5b:45:fc:e5:78:
50:00:88:a4:d0:59:5c:67:d4:67:5c:d4:83:78:38:a4:11:cd:
b0:23:d4:cd:c0:1c:87:17:12:6d:aa:13:72:41:9f:a5:84:8f:
38:bf:bd:ac:a0:2c:61:97:dd:40:71:3c:e2:b8:44:9a:91:95:
4a:fd:9b:5b:66:20:d3:da:6a:31:8f:cf:ff:bd:a0:54:ac:6f:
1c:d5:55:a3:f5:92:96:91:16:84:f6:9e:6a:2f:01:d2:82:3c:
48:55:9f:92:8b:53:77:4a:1f:b7:50:08:97:6d:27:43:16:dd:
28:3e:f6:21:11:79:61:c4:b1:8a:9c:cd:1d:a0:c8:b6:fa:5d:
43:99:9b:11:f0:6b:d6:94:22:a0:53:af:f2:f9:16:b9:ad:de:
f1:ae:33:e1:50:3c:07:1b:a9:6d:d4:26:2f:f9:2d:50:f6:bb:
4d:1a:0d:39:02:0b:64:5d:d0:4d:2c:70:c8:b9:54:b5:f5:14:
98:39:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:00:37 2026 by rpki-client