Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer (raw, json)
Hash identifier: TbF9YotjGTe+dAbL6WmoxcCnFLpQmNTlCEkoSdEth8I=
Subject key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8321
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 12:45:22 +0000
Certificate not after: Mon 01 Feb 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.52.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33569 (0x8321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 2 12:45:22 2026 GMT
Not After : Feb 1 00:00:00 2027 GMT
Subject: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:5a:44:69:0a:0e:35:dc:bc:56:50:ed:1d:
5a:23:46:06:d0:37:7e:7f:d9:12:e9:d8:0d:72:cb:
4f:4e:04:ee:ae:2c:2b:f7:56:ce:5b:4b:a4:51:28:
c2:00:74:9a:58:36:d0:ad:df:94:52:48:77:1d:c1:
b6:38:1d:bc:db:90:b0:c8:c9:1a:7d:c3:09:c8:2e:
73:42:ec:a7:08:58:c1:c1:71:31:03:9d:b8:89:ab:
4c:be:25:aa:03:2e:65:e0:a3:5f:07:77:03:a0:2d:
31:16:33:2c:cb:85:13:68:a3:f8:a3:87:95:cf:8c:
0f:d2:14:40:fa:a3:3b:16:95:a8:f8:7c:ce:84:f4:
53:20:6e:6f:f1:a7:5a:cc:2b:df:30:70:9d:2e:9c:
94:01:bf:10:b3:e0:21:d0:da:fe:ce:26:be:45:48:
59:21:1e:a3:11:ab:c9:e5:ca:4a:90:55:9c:8f:de:
49:e7:b9:35:2d:fc:ee:e4:dc:da:7b:06:95:c9:29:
b5:ae:eb:a3:4c:ca:82:d0:8a:49:bd:0a:ec:b4:e5:
96:a8:b9:40:b7:47:b7:8b:d7:cc:c3:3b:93:57:08:
a5:ca:83:1a:bc:11:05:ba:bf:1f:23:ad:ca:c8:58:
fe:d5:f7:4a:b1:a5:09:42:dd:2b:cf:8b:dd:3b:60:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
87:1c:12:25:e5:01:5c:b5:76:c7:4f:94:fe:77:a1:13:91:72:
c0:c2:6f:81:c8:61:6b:63:26:84:27:cd:23:9e:a9:15:93:99:
f3:c9:65:ab:56:16:82:d0:44:8a:3a:78:cd:57:ea:7f:12:92:
32:9d:a9:ce:46:36:31:42:09:03:8d:2a:52:c3:9b:c0:95:fd:
f3:66:64:42:47:09:22:35:25:38:41:99:30:d7:78:d9:8a:41:
89:1f:c1:f6:05:0a:db:26:83:cb:e4:e7:c9:ed:b9:e5:04:fd:
82:20:3a:a4:72:b8:45:2f:6f:d9:ed:a7:e1:3c:3e:b5:e4:0d:
f4:48:63:17:79:99:2d:9a:a1:52:c7:c0:2f:b5:a7:c4:3c:0a:
c0:05:05:8d:d9:f6:6b:fc:6f:cf:bb:67:1d:f3:26:23:43:a6:
e7:a1:9c:3c:30:30:bf:91:59:ee:ed:9e:51:5f:07:99:cc:b4:
96:f7:7c:ba:66:8a:01:93:a8:17:45:fd:0c:df:c5:83:2d:d3:
ed:f3:35:6b:f8:29:07:26:9c:0c:c9:e9:62:18:c6:5c:f7:4b:
8e:bf:d4:ad:5b:4d:31:b6:7a:de:be:83:c8:2c:68:b4:95:27:
0e:be:07:5c:67:b0:4a:ba:b7:52:ad:06:17:b5:46:4f:9b:89:
d3:86:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:25:30 2026 by rpki-client