Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer
File: 3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer (raw, json)
Hash identifier: ROqtdUddlzEld3lv9Zdb3Z8jDRwqXgFSTIDjYF/IliY=
Subject key identifier: DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Aug 2026 03:45:30 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.64.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32947 (0x80b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 14 03:45:30 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91731A3, serialNumber=DCFB72C6F6D0395C4597F32F824BD6896DB37B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:5c:00:08:89:5b:18:d4:18:58:76:77:2f:
7a:e6:c6:2d:cc:b1:43:bc:08:29:30:d5:11:27:be:
bc:3e:8c:9b:45:91:5d:06:a3:8c:06:33:b5:74:30:
c5:cb:ea:eb:d5:35:bc:95:88:57:f5:fa:d2:23:1d:
3c:c2:74:75:06:23:1b:1d:75:5b:09:08:bd:3d:f0:
f9:2d:cb:35:a9:bb:a6:7a:d7:9c:40:35:73:ce:b7:
2a:d5:84:4b:5c:9d:4a:17:14:d6:91:8f:96:8b:20:
33:d0:c1:e1:35:43:49:17:11:26:bd:a8:6b:5b:ca:
d4:e2:72:12:f5:c4:20:9d:d6:d8:26:a1:e4:0d:9a:
5f:04:20:6f:d5:b6:72:6e:c9:ca:ae:18:06:33:41:
48:fd:56:7a:b5:cd:8f:49:b6:cd:a3:8c:f4:48:91:
95:74:d3:cd:b1:aa:e0:b9:5f:83:3b:c1:3d:a5:5d:
64:84:75:94:f3:0c:37:e8:c3:34:d2:42:f5:6b:08:
05:72:72:2b:85:d2:d2:9e:3c:e2:65:91:43:f6:8d:
e6:ee:e8:5a:ec:4c:a3:26:58:55:8e:f6:5f:88:41:
b0:f8:17:e7:06:f8:3a:63:96:f1:f3:80:a2:bc:62:
6c:29:7c:fe:0f:40:7e:3d:85:08:40:08:d5:19:21:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.64.0/23
Signature Algorithm: sha256WithRSAEncryption
74:bb:5e:05:58:80:4b:c7:6f:e8:6f:57:a7:57:93:16:cc:97:
84:3f:1a:4f:68:69:0b:a4:3e:fb:60:7f:b0:57:13:23:c3:da:
d2:af:c4:3c:c0:52:18:ef:1c:5e:e1:b7:c1:46:8a:06:cf:c5:
17:43:2c:1f:86:36:d2:8b:cd:5f:0e:b2:40:78:19:9b:7c:ac:
f9:68:66:81:77:30:65:0d:31:f6:f7:b7:fb:cf:b9:d1:5d:01:
11:a5:c8:24:e0:88:50:76:03:9b:d4:6e:82:c9:55:3f:68:58:
44:48:b9:ea:26:fd:0c:c9:5b:e5:25:ff:39:31:ca:f2:35:0a:
5a:c8:f2:7e:db:fa:fc:0d:02:40:a8:42:b1:96:33:45:ff:85:
70:75:48:15:b1:e4:f4:f6:91:3b:96:57:de:94:3c:bc:a8:3b:
0c:5a:1b:6d:1e:01:d2:0a:b3:8e:da:d0:cd:97:38:ad:0b:a2:
48:c6:36:d3:0e:1e:40:8c:6a:13:9d:1d:cc:15:05:e0:25:30:
c9:9a:04:a9:47:e3:8c:19:a5:ff:63:4f:fb:a4:75:11:12:85:
74:d4:ce:da:4f:d1:44:e2:12:d3:41:17:8a:4c:8d:7d:10:ff:
24:33:6c:1d:f9:5f:92:0e:2e:18:1e:0d:5e:16:f9:b3:29:ae:
cc:b4:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:35:31 2026 by rpki-client