Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CHMuMVhYRaRp3TExQQXXL1NsvtU.cer
File: CHMuMVhYRaRp3TExQQXXL1NsvtU.cer (raw, json)
Hash identifier: VvbnRYJLrqLPO1xLOTgxt6NmpCHv+OX0N20vnZrZ0j4=
Subject key identifier: 08:73:2E:31:58:58:45:A4:69:DD:31:31:41:05:D7:2F:53:6C:BE:D5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 834F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/CHMuMVhYRaRp3TExQQXXL1NsvtU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 06 Oct 2026 22:43:53 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 209.216.48.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33615 (0x834f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 6 22:43:53 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91454A8, serialNumber=08732E31585845A469DD31314105D72F536CBED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:1c:b5:b8:02:e1:cc:9e:fc:e3:eb:6c:ed:
38:d3:20:86:a1:5c:19:53:c0:3f:7f:c5:89:ea:f2:
bb:2e:a0:0c:40:f4:f2:71:76:16:3d:4e:e4:36:1a:
bd:59:19:e4:7d:61:79:48:7f:0e:bf:c8:9b:d3:70:
32:a2:8e:e2:b6:fc:2b:3f:dd:59:26:d2:69:45:d2:
05:30:e0:bf:c8:3f:0b:87:e0:75:00:d2:c2:18:6e:
8c:e7:03:4b:56:9a:a3:28:8e:b8:d0:5c:63:cf:62:
6d:3f:d3:24:e4:a5:d9:c9:6f:f9:24:93:80:45:be:
d1:8c:ea:20:d5:1e:1b:ae:ad:59:01:68:cd:76:33:
27:7a:be:52:26:98:2d:92:59:fd:cc:65:76:7a:9e:
14:51:38:76:2f:71:ed:a8:3d:02:cc:db:e7:d4:bf:
d4:77:82:b0:54:6f:fc:b9:5f:f6:d8:24:60:6d:03:
f0:9e:92:b0:cf:26:c2:3d:71:3a:e3:b0:14:6e:96:
98:50:56:5e:2c:59:02:9f:01:83:37:48:28:33:9a:
a0:54:85:15:af:b9:04:12:21:92:f1:84:66:79:f8:
ff:e9:26:4a:63:64:fb:66:0e:52:d6:6e:1e:a3:64:
14:bf:44:4c:00:99:9f:c4:37:76:3f:48:f9:69:ae:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:2E:31:58:58:45:A4:69:DD:31:31:41:05:D7:2F:53:6C:BE:D5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/CHMuMVhYRaRp3TExQQXXL1NsvtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
209.216.48.0/20
Signature Algorithm: sha256WithRSAEncryption
57:6b:f5:12:95:51:ea:94:4c:d3:5c:43:00:ed:76:bc:15:f8:
60:ef:7d:b5:0b:05:fe:49:bc:89:ed:d0:2d:2b:db:11:cd:5f:
75:17:9a:f4:7b:66:93:1e:3b:59:5d:b2:4d:63:c7:d1:76:31:
b2:e1:f2:c3:50:df:72:50:3e:88:40:66:2b:9c:56:84:ce:c5:
fa:51:60:a8:c2:87:39:19:1a:da:ba:40:f9:e0:ce:18:ea:0c:
2a:0e:c7:e4:8b:52:00:08:3b:83:fe:91:02:d0:7f:f9:b4:65:
55:07:04:bc:fa:00:4a:8f:31:1e:64:a6:ca:52:e8:04:39:a4:
f7:3b:60:b6:32:c6:73:86:45:09:9d:b6:5a:56:cf:f8:76:06:
9a:a6:f1:eb:54:76:07:34:3c:4e:3a:a3:86:a4:6e:26:39:13:
07:96:22:68:19:5a:da:56:af:30:d9:0b:a1:5a:05:19:b5:f0:
82:0c:85:d4:63:72:bf:14:07:d7:8f:f8:84:74:fc:13:33:8d:
d4:87:c6:3e:5f:fc:c3:06:77:b0:ae:b0:46:3c:21:61:fa:fb:
07:1e:a7:80:94:d7:31:84:16:20:d3:71:c3:0f:a2:45:06:7a:
1b:cc:aa:a5:2b:82:85:89:4b:2e:5d:1e:1a:1c:04:51:28:da:
20:ee:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:50 2026 by rpki-client