Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
File: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer (raw, json)
Hash identifier: fQBdl+wN7vPgnDQxLUTdYc/eVECbRQGfJe/P1lbzESg=
Subject key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7BA3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 May 2026 12:23:09 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.152.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31651 (0x7ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 20 12:23:09 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:85:e0:51:3e:b3:4f:44:01:1e:e5:08:88:
b5:de:8e:8b:d1:f6:d6:cd:65:74:36:9c:7f:e4:0d:
3d:2c:4a:b4:29:a8:6d:37:dc:f7:f2:ce:43:63:f6:
13:ab:84:e3:72:e5:43:06:ca:f8:ed:53:fb:78:5e:
04:26:d8:6f:60:72:7c:85:27:4a:6c:19:d4:37:4b:
17:a0:73:8a:d3:a7:16:22:97:78:87:79:83:73:5d:
e9:f5:be:88:0c:6c:89:89:3c:d8:96:56:03:bb:12:
95:7c:cd:85:f9:41:33:20:78:42:08:07:c0:0f:85:
a0:23:f0:70:b2:96:0d:33:68:04:2b:ff:cd:72:4b:
0a:a5:a9:64:c2:76:69:b5:6c:e1:c8:34:ea:ae:fe:
31:d6:5a:ff:32:10:c9:15:06:75:85:d3:c9:f9:cd:
32:bf:42:2d:42:42:90:4b:c1:d1:a7:a8:00:87:25:
81:91:80:9b:80:fe:14:8f:42:4e:14:33:53:c0:88:
46:4f:24:38:c1:d4:f2:a4:95:86:de:ec:de:4a:35:
1a:db:18:71:56:3b:97:b0:31:fe:92:ad:df:bc:4e:
78:13:27:ef:27:3f:86:04:4a:b6:51:b9:58:bc:39:
ff:00:47:50:97:75:26:a0:d7:95:d4:87:8f:3d:20:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.152.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:2d:a6:23:21:7e:f4:fc:94:d4:ca:8f:97:4a:b5:0b:a5:8b:
6b:8b:e2:a7:16:1d:48:34:62:90:8b:12:2f:07:6a:0a:32:7f:
f0:d1:bd:98:39:92:f7:a1:a7:a2:e5:e4:c5:f1:c6:fc:81:68:
e9:14:95:fb:93:22:21:f9:ee:44:80:cc:ce:44:b8:9e:fb:27:
33:d3:fc:3c:c4:15:a9:07:57:76:dd:9e:f4:43:ba:53:85:40:
cb:57:11:f9:99:11:eb:84:9d:0e:bd:92:92:13:84:1e:15:43:
8c:ac:07:7f:d1:30:a4:c4:4a:57:10:f1:32:c4:ce:6f:75:3a:
80:89:77:e0:8c:58:63:f7:11:5d:11:0d:4f:62:8d:21:16:0d:
72:16:b2:cc:cf:c5:1e:b8:4c:ba:42:e3:8f:aa:0f:ec:28:2f:
9a:31:ac:43:81:3a:ac:75:68:e4:cc:ff:0b:10:16:f0:ab:3a:
7e:17:24:50:7c:81:98:99:f7:fa:b7:f7:10:cd:1a:24:16:ea:
84:b5:c4:e5:03:3f:b2:70:88:66:5e:bc:5c:4c:78:67:4b:03:
c4:e0:6b:10:5f:e6:0f:75:d4:62:40:50:8a:f4:ee:27:29:50:
ac:89:26:05:a0:8a:d9:39:d7:de:b0:08:33:80:eb:57:4e:8f:
f8:f3:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:26 2026 by rpki-client