Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
File: 089k1dsXYfy2pVLwaAkTMMW19Ts.cer (raw, json)
Hash identifier: rHJBSu8oYC/72jYzbwiZUcLHQv9e96inecA8WtvenV8=
Subject key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8069
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Aug 2026 06:26:41 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.154.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 13:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32873 (0x8069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 7 06:26:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:33:19:1d:e8:30:66:47:71:e1:17:ac:68:
e5:41:45:b7:38:65:1b:de:93:34:7e:9f:14:09:db:
5d:ca:1b:7c:fa:af:51:68:e9:10:13:bf:a9:21:f3:
24:ec:24:40:30:80:b4:c2:d9:af:49:a4:77:f5:1c:
ee:50:9f:37:b8:11:fa:54:e6:42:b9:ba:f8:96:d4:
8c:15:99:cf:98:e7:b8:a9:84:30:e4:8a:cc:d3:65:
23:cb:2a:c6:4b:ca:09:de:5a:66:48:3f:f0:be:0d:
a6:87:23:e4:ea:03:10:cd:f6:d7:42:4b:5b:f4:a9:
8a:0b:f0:cb:0b:54:64:b0:75:7d:30:97:c8:01:fa:
e0:c7:f8:f8:7b:58:d9:91:b9:15:43:86:89:24:8f:
83:89:16:29:e6:e8:ff:bb:50:62:4e:4d:ba:c0:da:
bd:0b:10:6c:7f:f4:e3:d9:58:df:e3:90:25:07:fc:
bc:d1:92:95:c1:50:7b:2e:bd:79:30:2e:a4:58:61:
0e:25:0f:f7:8f:6d:ab:47:40:42:78:2c:8b:51:61:
6b:e8:91:a3:c7:8e:e3:d1:aa:67:3f:0b:ac:08:98:
05:10:93:90:03:96:c2:ea:25:62:58:cd:47:e5:56:
45:a9:d7:ee:55:33:fa:3c:40:93:a8:18:84:0d:c3:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:63:81:83:ac:9a:94:81:54:c1:b3:06:fb:b9:84:ac:e5:a1:
75:31:91:b3:f5:98:d9:1c:72:dd:b2:f8:31:f0:77:49:66:89:
1a:5a:08:eb:f6:b5:68:ca:d7:cb:89:92:39:f4:18:94:89:ce:
cb:78:b5:6e:0e:a0:53:15:7c:eb:14:08:f1:7f:73:9a:2d:8e:
0b:e8:dc:06:db:10:94:31:d7:ce:c0:c5:1e:e3:54:10:fe:42:
fd:17:ea:04:92:ba:de:5c:be:80:8a:92:bd:78:31:f5:13:0f:
84:5c:c8:ba:ed:a0:6e:5f:f1:0c:25:51:58:b0:aa:6a:b2:bc:
d2:7e:38:be:55:63:20:55:41:a9:35:3c:c2:e4:c6:87:cf:0e:
bf:b0:fc:87:a0:2c:10:a2:16:4e:5c:de:43:97:4d:a3:6c:4b:
72:64:21:1a:03:17:cb:e3:c3:ed:d9:5e:89:4c:be:ee:10:24:
b3:03:20:f2:bd:f7:de:77:72:1b:ea:fb:38:53:fd:26:59:d4:
8f:82:b6:30:21:68:45:9c:41:20:c5:c4:c3:9c:03:10:70:12:
c1:0a:6e:19:ae:5b:9d:00:b9:89:75:c2:32:03:8b:16:84:3e:
f4:8d:ab:4f:3c:58:e1:bf:fd:7a:44:7a:06:0d:d4:a3:9e:16:
ea:71:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:04 2026 by rpki-client