Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
File: 1j3oKnWfllf48HOyUSUarme6S6Y.cer (raw, json)
Hash identifier: 4bJP1v2Ce3KQGnYF1gh1EeVp8aCiXAdoApraIJp/D8I=
Subject key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 12:33:19 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 147.50.0.0/19
IP: 147.50.34.0 -- 147.50.62.255
IP: 147.50.64.0 -- 147.50.78.255
IP: 147.50.128.0 -- 147.50.175.255
IP: 147.50.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33187 (0x81a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 1 12:33:19 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:52:6f:ad:2e:28:53:91:ec:1f:b7:34:dd:
b9:e0:8d:2e:0f:f5:2d:2b:1f:a4:44:64:f7:c5:46:
91:47:0a:e5:23:06:19:5b:d6:c4:49:0a:46:41:bd:
72:d9:e2:aa:d9:c5:fc:fd:a3:ac:61:3d:01:34:ca:
d3:c1:75:03:b2:b9:5b:1a:da:f9:32:69:1e:dd:7a:
05:47:27:a8:1e:b1:76:56:79:cf:68:61:17:3e:96:
49:6d:65:84:3e:2e:67:dd:96:00:9c:e3:4f:bd:66:
e0:b0:5d:ad:39:ea:ca:12:14:5f:33:e4:16:9a:3a:
1d:fe:71:fb:0c:b7:7a:27:31:6e:0a:9b:d5:f5:ad:
3d:ab:7f:fa:81:cb:4c:53:fd:d4:a5:f0:a6:b7:e0:
5c:b5:a1:e8:c6:b9:b6:8c:f3:f2:8a:77:29:30:1f:
41:ae:6e:41:68:d1:41:df:42:c2:79:37:26:ca:3f:
a0:80:f3:0d:a7:18:0b:82:98:a4:cb:60:d4:cc:e5:
84:8c:cc:1b:36:3a:23:7f:d1:6e:b4:3d:38:5a:6c:
ca:45:c1:29:47:4c:13:51:db:90:6b:c3:a3:54:03:
ca:01:02:7c:aa:34:8b:2e:17:23:9e:77:30:9a:2d:
98:81:fc:84:99:d5:91:81:1a:16:ff:a0:5a:e7:5f:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.0.0/19
147.50.34.0-147.50.62.255
147.50.64.0-147.50.78.255
147.50.128.0-147.50.175.255
147.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
57:32:4d:ea:7d:e7:4f:8c:d6:da:fb:10:d8:84:51:88:7c:24:
33:af:70:8a:38:0f:86:3d:2b:8b:ae:11:42:3e:de:f7:48:5c:
71:1c:e4:58:f9:04:80:55:ce:6d:e9:bd:50:4b:82:57:3c:2b:
10:4e:a2:a4:e5:29:09:b9:c2:6b:fc:1e:f2:57:7f:1c:6a:81:
cd:04:0a:45:eb:2f:5c:50:70:41:44:eb:59:4f:b1:90:1a:a9:
9a:02:35:d2:e9:3c:6d:f5:ff:6d:5c:5f:8d:1b:24:bf:44:ea:
92:9e:78:e8:df:a6:cf:1c:b5:67:05:56:0c:81:66:57:e5:59:
a8:b0:ca:c5:1e:ec:71:f5:42:eb:b0:84:06:13:cf:57:14:4f:
22:bf:1e:89:bb:10:71:b4:22:43:5d:80:48:4f:b7:f0:8b:3c:
f0:0a:02:dd:75:ef:cd:28:93:42:dd:47:8a:26:8c:12:b6:77:
30:1a:c1:46:53:e5:6b:28:ba:e2:54:5a:69:ed:e1:50:66:ed:
5d:9c:f8:74:16:5e:e6:77:69:5a:6b:67:84:b0:0b:d5:a0:50:
64:6c:30:0e:09:8b:91:fe:13:54:5f:8f:e6:f1:96:e9:64:03:
8a:e2:2d:9b:c7:b5:e8:eb:33:60:df:20:7b:7a:5e:b9:48:f2:
ff:96:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:33:22 2026 by rpki-client