Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
File: CXELW2Z0njOdEkzebWbONmrMq7A.cer (raw, json)
Hash identifier: WERGF5+4l6ajm17+/nlT0ulG42HRANCUdqYKY4+2n4s=
Subject key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82B8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 14:01:59 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 157.85.240.0/20
IP: 160.222.152.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33464 (0x82b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 25 14:01:59 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:d3:6e:46:80:fa:1b:0d:bf:dc:3c:87:0f:
cd:97:02:c2:b7:5d:c7:06:f7:aa:92:82:40:5e:65:
e0:a5:6a:31:ac:47:33:c2:1a:e0:0c:0c:06:81:d9:
ba:5f:99:3e:f9:36:87:18:3b:7d:7f:8a:46:1f:6e:
aa:dc:4b:c2:a4:68:f4:4e:f2:70:99:9f:af:ee:16:
e2:8a:e5:9b:8e:a5:0e:f2:eb:d0:10:44:db:3f:07:
af:dc:5d:2d:40:43:ad:c1:78:a3:01:a5:f8:75:c8:
36:f1:b1:82:7c:45:2d:81:bd:9f:9a:29:3e:19:4e:
61:dd:20:58:f2:53:aa:34:b6:d6:23:ec:f7:00:f1:
9f:e7:af:24:c9:e5:1e:e5:d5:d8:c5:fb:f2:5f:c5:
93:87:59:d0:b6:57:cc:ba:4e:20:01:22:82:52:78:
48:17:9d:63:f5:15:2b:f7:00:0e:12:f1:01:f7:39:
1d:7c:9c:a6:93:ea:98:e8:0b:61:1b:a4:40:6f:17:
d2:ed:12:6f:e9:44:93:32:79:6a:a1:36:e3:84:93:
6d:b2:41:12:74:61:e2:68:4f:01:5e:85:60:c0:b1:
5d:cb:bf:90:dd:81:22:81:d5:53:74:63:a8:ff:5b:
a2:66:8a:55:6a:e6:60:82:3b:e1:4a:85:f0:50:9a:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.85.240.0/20
160.222.152.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:58:c8:0a:21:cf:96:12:ad:9e:cc:0a:1f:9a:55:fb:d1:e3:
de:23:c0:62:b9:13:d9:7b:21:b3:e7:68:89:8c:ad:c0:28:bc:
5a:7d:4b:7c:b2:f9:b1:95:59:78:bd:22:1a:34:48:4e:18:06:
fc:c7:f9:65:d6:3b:d2:d5:77:cb:9a:2b:e6:c5:3f:7b:06:1a:
59:5d:bb:68:96:65:6b:c3:45:39:1f:ba:4c:d8:00:ef:53:03:
d3:6a:18:f8:c9:25:50:72:45:d5:ce:73:13:69:0f:86:db:04:
1e:28:78:62:e7:7b:83:04:b5:71:93:e9:f4:e1:54:40:80:a4:
12:be:f6:d3:a4:96:98:e4:5b:20:8e:6e:e6:b9:f1:ab:7d:f5:
ad:b5:58:6e:b0:5a:c1:95:14:52:c5:7b:3d:f1:49:53:70:3b:
a3:7f:86:1a:e7:c3:48:f0:e5:7d:86:c8:90:0c:1c:11:57:ff:
04:ad:64:7a:50:77:a5:f6:70:2c:02:b7:b8:5d:34:87:40:86:
05:58:d5:5b:cc:aa:2d:2b:24:3e:95:24:14:07:3c:de:1e:28:
89:50:8f:14:ad:32:0b:a7:db:e9:6a:29:43:9d:aa:74:52:00:
f5:e4:6a:39:b9:d2:68:c6:10:49:9a:25:99:33:3d:5b:d2:95:
55:11:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:03:52 2026 by rpki-client