Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
File: 9U-AgBarS7BveWqJRmfHC91I-_Y.cer (raw, json)
Hash identifier: d9EBpaAWvU3m+veWezFI2bzRBO5gPiAWukfN9L5ts7k=
Subject key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8373
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 12 Oct 2026 12:51:42 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 64.255.42.0/24
IP: 64.255.54.0/24
IP: 107.6.124.0/24
IP: 160.187.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 14:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33651 (0x8373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 12 12:51:42 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:ca:21:f3:05:df:df:ef:2f:5b:8d:f1:0f:
f7:28:c7:b6:35:2d:23:e5:89:b5:5d:32:10:07:64:
a7:17:8b:cf:f5:24:3e:be:68:67:de:01:80:c7:62:
eb:81:8e:8d:50:56:3a:ed:a1:48:fe:ed:d7:a2:1d:
15:68:08:6c:dd:35:90:7d:89:34:3d:61:46:98:10:
f5:3c:cc:81:52:3f:0a:fc:72:63:1f:81:78:f4:41:
4f:a8:e6:d9:a8:e5:8a:c6:38:fd:3e:3d:4e:18:83:
7e:91:55:27:c1:cf:f5:53:0a:a4:3a:0c:52:de:29:
52:2d:e8:6b:65:fd:b3:c3:f9:d8:cc:76:66:4b:d6:
73:bc:13:f9:e9:7e:a8:24:09:e8:49:e4:c4:f0:d1:
f4:bc:6f:b9:13:4a:44:df:77:f1:b9:0c:15:a1:45:
d5:39:0c:5e:80:b8:12:ed:9b:f3:ca:ad:55:6a:88:
4f:65:7e:be:1d:b6:0c:02:de:04:4c:e1:10:c7:8f:
46:26:ee:07:73:85:61:49:c5:b4:12:7e:37:36:9a:
76:ad:9f:7d:d0:57:62:6e:ad:6a:64:e2:3a:7f:8a:
67:b1:65:7e:ae:a3:fe:1b:70:37:fc:a7:8c:9f:2c:
53:f1:6d:cc:a5:42:14:9e:33:1b:d3:f8:ba:62:22:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.255.42.0/24
64.255.54.0/24
107.6.124.0/24
160.187.32.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:1a:db:fb:10:88:8e:90:83:dc:3f:eb:ca:de:b2:8a:ed:25:
a0:e4:11:60:ab:14:47:aa:62:7b:5f:76:79:73:88:c1:22:63:
56:b8:50:aa:5d:79:87:32:d9:97:3b:0b:9e:a2:54:cb:7f:e6:
73:c0:e2:c2:66:3b:0e:23:64:22:b5:66:99:ea:a0:c8:f8:f6:
6c:73:b8:2a:a5:d9:b0:2c:ab:76:7e:fa:af:39:93:8f:4d:08:
1a:f6:f4:3f:c1:c5:b7:50:ed:a4:80:c9:70:1b:ca:23:75:9b:
a8:86:61:d8:90:ed:f1:91:a4:83:e2:f8:fe:87:0f:50:fb:30:
b6:5d:d7:9b:4c:4e:bc:e0:2f:66:24:87:39:9c:4a:a6:cd:37:
9d:7f:c6:5b:98:cf:5e:27:b6:3c:fd:00:df:ed:54:f8:f0:91:
a0:f1:19:28:e3:a2:1c:48:42:91:26:38:2f:9b:86:f9:94:76:
2c:b3:82:99:cc:b6:3d:26:c2:86:28:77:6c:ff:6a:cd:96:e2:
79:0e:9f:12:1f:22:7b:cc:c1:3e:05:ac:e0:9e:36:6f:db:4a:
fa:7a:15:a4:fd:e1:c8:a9:4e:67:64:2c:5c:28:59:21:89:db:
98:82:30:a7:a0:58:ad:57:9b:e6:1e:bd:83:2c:23:4a:d7:97:
7f:bf:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:50 2026 by rpki-client