Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
File: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer (raw, json)
Hash identifier: SBVnEy104F27eRQIoLIC9T8TphjRWbn69R/oXaD1K58=
Subject key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E2C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 04 Jul 2026 13:28:02 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32300 (0x7e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 4 13:28:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:0e:aa:1f:1e:2e:24:a5:ba:73:f6:fd:c2:
85:48:15:26:1d:bd:1e:d1:9f:e9:da:99:ea:4c:7b:
68:02:cb:39:8d:7b:e8:75:ce:b7:ab:a7:9d:f0:41:
54:21:08:40:00:cc:2e:d6:29:04:41:2b:77:e1:d3:
d9:bf:64:76:9a:33:c8:09:ea:90:12:c4:30:48:7c:
f4:5a:1e:1d:50:39:49:4e:8c:8d:cd:ec:e3:0d:f1:
f6:bd:5d:be:9a:33:d6:c0:5d:64:6c:73:86:2c:41:
fd:51:f0:62:6b:7e:d3:26:03:4d:c7:24:52:fb:12:
51:a5:ae:80:98:1f:4d:b0:ed:f5:9e:d2:99:bb:bf:
de:09:e4:32:47:06:c8:6d:8f:fa:6f:6d:a3:db:93:
e3:1b:9b:2a:2b:a4:6d:82:cd:3c:0b:fc:06:f1:23:
39:ff:9e:77:19:70:6d:91:3f:4f:55:3c:19:65:92:
fc:14:aa:3c:6b:4e:cb:5b:d1:81:23:e2:8d:41:42:
46:22:40:b5:76:d3:39:d7:bd:aa:85:8d:56:dc:c6:
7c:69:6c:2c:cf:65:6e:48:74:48:54:67:8e:82:d8:
86:33:d5:a2:72:cf:bc:dc:62:02:65:95:69:3f:aa:
2a:4a:bb:2e:a8:c8:a8:a2:66:7b:13:78:aa:91:cb:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.240.0/23
Signature Algorithm: sha256WithRSAEncryption
54:69:35:31:22:af:b2:90:d6:a5:f8:29:e8:04:0a:32:a1:c1:
45:7d:2e:a5:e5:22:2d:58:88:d5:bf:3e:90:0d:e3:1b:d8:2e:
42:26:e6:af:f1:c3:4e:41:d4:f7:7b:0c:3d:87:f6:79:a0:04:
48:ee:4c:40:a1:42:c6:f1:43:47:73:05:43:57:1f:5b:23:ca:
96:a8:9d:a7:7d:ca:9f:80:7f:1a:3a:52:8e:5b:a3:64:e9:38:
cb:bc:cd:0f:0f:0d:63:54:52:89:76:cd:5d:eb:05:8c:80:c6:
8c:1c:3e:6b:2e:41:7a:bd:50:27:bf:cd:74:a0:7f:61:fe:81:
8b:1e:52:4e:3b:b0:4d:bf:94:ad:ac:1d:28:98:71:24:c6:30:
15:76:6a:b2:be:a7:04:f3:87:cd:a1:a8:fe:4e:b6:ee:f2:cb:
d7:ae:35:2c:63:22:d4:96:ba:c9:27:11:27:db:7f:7e:4d:ee:
c8:9e:a9:6f:eb:59:d7:e9:92:b3:10:55:34:82:f1:0c:25:82:
9c:b0:b4:83:c1:09:5c:59:87:26:06:c9:ff:fd:db:3c:a4:b8:
fd:f6:7f:ed:30:5d:97:61:51:d7:f6:88:1e:5e:bf:2d:8a:41:
48:f1:87:70:f4:ef:ca:1b:a0:7f:af:ac:76:b4:71:9f:88:a4:
73:a1:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:20:49 2026 by rpki-client