Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer (raw, json)
Hash identifier: Vo7fY6ilfus/9gZH7/Txih5mg1UpItDJq99tgYe6oFE=
Subject key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8146
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Aug 2026 14:11:05 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 130.248.108.0 -- 130.248.127.255
IP: 192.150.16.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33094 (0x8146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 25 14:11:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:35:81:8e:60:70:d0:92:73:b5:51:66:3e:
ab:a5:a7:14:d5:61:e3:d9:1b:3b:99:3d:80:ed:8c:
40:ec:37:60:e7:03:e9:2b:21:f0:be:c5:7b:75:93:
4f:69:ac:eb:64:c3:4d:12:32:06:a7:a8:2c:0a:b2:
6c:4b:14:2f:17:71:b7:db:40:24:1f:2b:00:58:e3:
92:3e:88:f3:3b:4c:31:49:27:52:56:02:99:e3:f2:
24:47:fc:a5:4a:2e:69:65:58:ec:7f:73:02:76:c4:
fd:cf:06:f9:12:bf:f9:b2:5f:39:66:6f:43:4f:bb:
9d:fa:89:7b:c0:12:97:23:d9:25:a9:a2:92:ab:ec:
c6:d0:91:80:e2:88:11:5f:79:14:51:87:69:88:1d:
af:34:99:fe:f9:25:28:0b:48:13:ee:40:c2:38:1c:
80:32:40:ec:d1:75:cb:c9:73:d7:02:48:10:68:16:
db:e3:27:9d:ce:5f:57:da:c8:8b:d8:78:37:4a:b6:
9b:87:aa:72:b6:a0:63:1f:45:9c:df:9f:5d:6f:96:
f4:53:7d:8c:8c:17:b0:ca:04:34:1c:a6:aa:be:2c:
0b:22:fd:9a:59:92:bc:bc:30:12:bc:36:0d:4e:cf:
44:ab:9e:5d:d5:d1:e6:43:46:b2:8e:43:53:2f:94:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.248.108.0-130.248.127.255
192.150.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:77:9f:c5:fc:c2:90:7f:eb:d6:59:19:68:e7:37:c2:68:3b:
97:f5:a7:75:a6:f9:9b:2f:3e:f0:dd:2e:06:45:e5:90:ca:87:
ae:22:50:20:a7:10:3b:01:19:95:1c:b2:97:45:b3:f4:b2:40:
60:c1:ed:7b:88:3e:ff:ee:0e:89:41:52:3e:6a:2c:9a:d3:e4:
50:5b:f7:50:e6:b2:64:46:e5:ed:3b:fd:4e:6b:f3:ce:36:a2:
1a:11:33:aa:0e:6e:cd:d5:ac:23:98:f2:7a:6f:bf:d5:a0:7c:
78:2d:3c:e9:eb:55:46:33:ab:b2:e1:3b:df:9e:b6:37:e6:08:
86:02:2c:14:f1:4d:ab:e4:3e:42:a5:81:8a:2d:c7:bb:35:90:
e7:2c:76:03:bd:79:88:e2:2a:40:ed:16:5a:d6:59:b4:34:32:
c7:c4:23:9c:ba:22:07:23:94:e8:b4:9c:04:0e:c9:35:86:8c:
2f:c3:92:31:7d:dd:3c:a4:e5:fc:ed:fd:d0:d5:fb:f6:0f:c1:
30:27:62:86:ec:60:5c:18:7a:b0:94:0a:22:bb:59:55:5a:02:
d6:e3:9b:ce:44:39:ad:78:cd:5f:44:a8:2f:33:26:fa:82:fb:
0b:dc:6d:dc:c8:87:18:8d:bb:82:29:12:20:29:9f:0c:ef:03:
4e:5e:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:29 2026 by rpki-client