Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ZPdA-kcUCBobrRYJqjm3Vh395g.cer
File: 9ZPdA-kcUCBobrRYJqjm3Vh395g.cer (raw, json)
Hash identifier: cMRn5ffSjNrjkvkHT1vMO9nsqpgtsGMRm1ZSfLybYJE=
Subject key identifier: F5:93:DD:03:E9:1C:50:20:68:6E:B4:58:26:A8:E6:DD:58:77:F7:98
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B59
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 May 2026 06:13:55 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.40.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31577 (0x7b59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 13 06:13:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9146179, serialNumber=F593DD03E91C5020686EB45826A8E6DD5877F798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:42:6f:72:8d:35:12:db:ab:57:96:df:a7:
eb:99:ee:b4:3b:2a:74:8b:c2:39:33:86:35:15:03:
e4:2c:c2:13:4e:04:a3:8a:44:62:6a:89:48:c2:14:
45:83:2e:98:06:c7:c4:e8:cc:f8:82:11:c7:b7:e1:
71:fa:6f:e8:1e:65:83:8f:bb:f8:83:8d:14:5e:23:
66:2d:22:2f:8d:af:37:cc:b9:34:f0:1f:0d:a7:ff:
18:89:34:8e:ee:9d:50:34:aa:b8:d8:e4:f7:cd:44:
e1:f3:73:4d:6d:d8:aa:c8:01:85:ba:b5:28:f9:1f:
8f:dc:a2:f5:c1:37:50:a9:f3:09:38:04:ae:ff:44:
62:05:05:c9:58:4d:1b:53:9f:79:60:e4:18:71:fd:
7e:34:26:5b:2b:56:3b:37:13:7b:45:15:29:18:a6:
4f:4a:a3:4a:1a:1b:a4:fd:06:c3:17:5f:f9:c1:1d:
8b:09:ed:b8:24:3f:d6:22:ca:39:f5:72:85:b9:05:
de:69:7a:a9:b1:2e:2f:36:9c:a1:48:39:2b:55:41:
4b:3e:6d:b9:b2:6c:7d:99:b9:f4:a4:eb:01:f1:3c:
8a:c2:45:e9:71:bf:86:5d:7d:6c:03:e9:55:0d:7d:
53:36:76:9a:e2:19:e3:00:f1:d8:44:4c:71:37:4b:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:DD:03:E9:1C:50:20:68:6E:B4:58:26:A8:E6:DD:58:77:F7:98
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.40.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:59:aa:67:e2:5e:9b:49:72:49:88:48:df:bc:c0:3b:d9:fd:
ff:3b:26:12:70:a6:4f:ea:e8:03:3b:3c:14:e0:92:c1:fd:3e:
61:bd:89:88:61:99:4b:1b:a0:90:20:9e:fa:f5:3e:44:ff:06:
64:53:a8:ff:7a:c9:6c:dc:c4:2d:68:0d:88:54:38:2a:19:c1:
1b:90:9a:58:78:3b:74:30:1a:fb:9e:b4:8e:c6:e9:a1:75:69:
e1:dd:b5:6b:5c:54:ba:4d:58:85:9e:45:11:13:b1:e3:d4:82:
7d:4c:89:90:69:e4:68:78:43:87:af:21:59:9e:5f:cf:91:dd:
69:e6:06:17:e4:52:e4:02:fc:80:4c:fd:eb:8d:8f:66:00:d4:
29:7b:be:1c:f6:c5:8b:62:ab:f4:55:a0:66:e6:4d:cd:ff:2b:
95:be:82:6f:da:8d:39:bb:4e:c9:a2:23:79:e3:7f:c0:c3:ec:
d6:29:7c:ae:4e:6d:77:cc:5a:1f:3a:62:47:f6:c3:bc:2d:ab:
e0:fb:07:da:59:d9:a9:15:64:ec:f4:6f:9f:a1:90:ec:6b:06:
ae:2c:ca:77:cb:43:ea:55:29:92:86:e4:57:12:d8:4b:12:cc:
00:a1:c0:46:22:98:ed:b2:03:e1:01:27:d4:83:43:09:c9:cd:
62:ee:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:26 2026 by rpki-client