Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
File: 4suW87BaY-nlR5ZSbszpSjWR5fw.cer (raw, json)
Hash identifier: d/ncC7yDNs9+Qillej6F8bzUwfE4Uy4Z4iev01xjHuw=
Subject key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8340
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Oct 2026 06:32:48 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.155.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33600 (0x8340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 5 06:32:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:e4:07:f1:9b:54:01:13:58:3c:d2:df:8f:
a4:66:b4:8e:c3:1a:62:aa:b6:02:99:6a:3e:55:a5:
72:67:f3:1c:03:ad:69:bc:67:26:c0:f5:7a:97:1d:
e0:91:07:2a:0d:df:9b:aa:26:80:92:43:ab:4d:c7:
97:14:f7:a1:cf:e6:a8:cb:c3:68:81:5b:39:89:6e:
ca:d4:6c:e7:d7:19:6c:76:37:ef:7b:32:bb:c5:2f:
a1:e6:e9:4a:56:c5:f7:ae:27:66:b8:75:f5:28:36:
c5:2e:11:17:1e:1c:d1:28:4b:27:b9:a0:55:e0:59:
c6:84:b1:8c:d9:32:65:2a:90:99:95:af:88:47:58:
fa:4c:77:53:a0:8b:69:e5:f9:a8:3c:aa:f8:f5:d5:
a9:86:98:6a:55:b8:80:a6:b4:41:9c:9d:8b:12:56:
e0:25:ba:c2:bf:48:66:71:f3:d1:11:57:5a:fb:20:
70:14:56:6d:6f:5a:10:a3:3a:5c:74:41:6b:7e:0a:
e3:9e:64:74:2f:5d:24:e1:cc:61:05:67:5b:f9:ef:
a6:9c:60:cf:fa:6b:43:70:dd:97:ee:1f:e9:30:50:
55:44:5b:e3:3e:7e:d4:37:00:aa:a4:91:5e:8f:70:
0f:19:c9:98:cc:41:ab:e0:17:ac:91:ec:b4:eb:b0:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.155.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a4:31:e4:09:b2:bb:cb:68:cd:1c:11:2f:60:d7:94:54:ac:
4d:26:d2:cf:56:22:b8:3c:ff:f8:0c:1b:e9:46:31:28:60:e7:
98:5c:c6:7d:3f:c8:8a:df:c1:7b:b5:39:a3:af:be:f5:11:34:
e6:69:29:75:53:15:be:e3:d0:7a:68:70:37:33:b6:6e:27:8a:
0b:3d:0b:2e:35:f1:8f:a6:75:d9:37:b9:39:c4:68:6b:01:e1:
10:7d:8f:aa:ce:8b:29:87:a4:c6:b3:0d:7a:20:3b:13:4f:94:
2d:4b:4c:a4:25:ff:f4:3d:36:58:db:68:c7:47:ce:87:ae:e9:
cf:21:9a:57:08:28:f6:03:03:76:77:72:17:95:95:e4:2c:01:
b0:77:cf:38:57:26:a2:f4:9e:fa:74:31:4d:2b:dd:82:c5:7d:
f5:3f:59:08:cf:e0:38:6e:a0:b9:e6:e8:5b:9f:24:7f:77:78:
58:a2:03:42:ef:04:2b:f5:15:2f:a3:e9:aa:d0:a6:2b:c3:35:
32:4c:83:27:75:18:f5:00:ea:91:a2:1d:ec:ba:9c:5c:b2:2b:
7e:4f:0a:8e:fc:cb:48:68:6f:cc:ff:8f:90:56:99:04:ed:f5:
9e:62:be:04:d0:84:e5:d9:40:90:8d:33:17:e2:5d:bc:33:04:
35:e5:7c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 00:44:35 2026 by rpki-client