Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
File: zcNLlJKQexpZ7moAuHtPwhkmqy8.cer (raw, json)
Hash identifier: QMQXJAayNSZr21J/Tqs3yds2mmwnnfQvrDTTu3jA63Y=
Subject key identifier: CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8247
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Sep 2026 13:31:24 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 134.144.0.0/16
IP: 156.31.0.0/16
IP: 156.149.0.0/16
IP: 161.126.0.0/16
IP: 192.159.16.0 -- 192.159.30.255
IP: 198.200.0.0 -- 198.200.9.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33351 (0x8247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 15 13:31:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C51D7, serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:91:84:85:0e:53:f4:9d:14:64:4f:17:d9:
e0:d7:04:73:1b:7f:24:b5:d3:e5:56:83:81:ae:cd:
cc:3f:d0:87:6f:91:c2:01:4d:64:fb:e5:68:02:98:
07:b5:51:82:fd:a6:5c:48:42:00:b2:72:d4:40:cb:
61:b4:55:36:3d:3e:dc:8d:7a:00:5e:94:bb:cf:6d:
f3:97:42:72:3b:59:02:86:cf:c4:45:d0:7a:b4:e2:
c6:93:13:a2:a7:ee:ed:e4:92:f2:53:f3:c4:48:82:
4b:7d:f4:e3:c9:8c:b7:78:6d:82:7f:3b:1b:f3:1c:
a3:67:66:ef:e9:36:f9:e3:37:4c:e8:0e:7c:60:7d:
eb:e5:fb:90:92:af:dc:d6:b7:4b:2e:f5:0f:14:69:
07:84:bc:b5:cf:79:e4:56:40:6d:ec:76:51:62:8e:
ff:80:4a:ea:02:96:c0:e7:23:65:b9:17:71:be:da:
61:a6:79:30:d8:79:27:7b:62:f7:88:5c:f0:a4:0c:
3b:7e:d9:66:c6:05:bd:20:37:4d:6b:8f:c3:b5:d2:
ec:7f:0d:89:f6:0c:a9:32:26:40:48:12:a6:eb:be:
b6:ea:fd:42:a2:ef:bf:81:b6:10:0e:60:e2:83:aa:
e5:c4:72:c2:5c:4b:12:39:5c:25:82:d8:09:30:5b:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.144.0.0/16
156.31.0.0/16
156.149.0.0/16
161.126.0.0/16
192.159.16.0-192.159.30.255
198.200.0.0-198.200.9.255
Signature Algorithm: sha256WithRSAEncryption
b2:da:88:f8:b9:8c:77:50:02:44:97:6f:ba:b5:b7:b1:13:3d:
ca:5d:cd:14:cd:61:fb:a6:1d:2a:55:46:c8:00:a3:a5:c8:c9:
09:59:3b:bb:30:1a:47:ed:c7:f4:3e:11:38:c5:b7:85:22:88:
32:02:2c:d0:b9:5d:32:62:59:97:0b:c2:4a:1e:72:e6:31:96:
db:69:77:fb:ea:eb:a4:5b:16:f8:2f:26:29:67:ee:ee:60:1b:
6f:40:0d:61:50:7f:03:f9:d9:ee:0c:8d:d4:dc:31:4c:ee:21:
19:3f:88:9c:dd:f5:f8:d5:dc:1b:1d:6f:a2:42:2c:c9:67:5b:
a4:63:f0:a0:20:6e:4a:5c:7f:da:74:1c:e2:ce:c4:b5:c4:4a:
f4:b2:61:12:36:20:f2:1f:b0:bb:4f:63:dc:1a:d1:bb:b8:ed:
c9:7f:c3:69:7b:ae:3b:38:c7:d6:c8:30:9f:c3:74:69:ed:75:
53:40:92:66:3c:ad:0f:e1:63:28:4c:00:3f:23:69:a0:69:ec:
a1:62:52:53:dc:ab:0a:24:d5:e6:b3:01:33:35:c5:dc:4c:d2:
83:c1:e8:ca:cd:f4:c9:57:9c:69:de:32:66:d2:b9:4e:d1:ad:
18:ae:c0:70:4f:11:ef:01:db:05:d8:7b:8c:a9:47:cd:5b:54:
fa:b0:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:05 2026 by rpki-client