Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer
File: Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer (raw, json)
Hash identifier: oVW9f2lcw6flrr9xVOtcf3WSC8d/84Dr0me4G2okuDI=
Subject key identifier: 12:3E:FB:1D:D0:55:24:59:1E:01:1F:00:62:56:54:DD:8E:95:B0:7E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C20
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 May 2026 17:13:02 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.238.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31776 (0x7c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 29 17:13:02 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9166D4A, serialNumber=123EFB1DD05524591E011F00625654DD8E95B07E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:a6:a5:9f:c8:46:7b:55:84:d9:4e:3f:11:
4d:ea:45:65:33:43:66:d8:0c:0e:06:64:8f:ac:83:
82:e0:f2:09:09:8d:c3:83:e0:0e:a4:ca:8f:9a:7f:
d5:bb:26:36:15:54:68:ec:f6:88:67:8e:94:fb:43:
42:20:8e:13:3e:40:32:97:dc:8c:d6:74:b1:c5:5a:
59:71:01:2e:f9:65:f7:ad:d8:52:ac:43:22:fc:af:
ab:2e:48:c1:6b:94:03:f1:80:c8:d9:23:d7:db:35:
9d:9f:f4:2d:a0:57:88:22:16:d5:10:af:a1:ef:0c:
f8:c5:62:13:c4:52:cc:05:d6:0c:ae:57:4f:25:72:
02:b1:05:b7:e2:a7:2f:fd:ea:02:be:7f:5f:e2:62:
6f:e0:8b:38:d0:01:6a:63:12:48:a2:5e:1f:b2:06:
30:6e:d3:65:67:bc:7d:4b:07:33:02:75:d5:bd:a4:
11:4c:7b:4f:45:6d:e3:5d:96:db:5f:2c:91:3b:62:
7e:9e:57:55:5e:dd:e8:59:71:50:28:3b:bc:a3:00:
01:18:a7:7a:78:9c:a9:b9:87:18:58:40:53:7f:a8:
12:29:70:b4:7b:3a:1b:0d:02:db:6c:be:05:94:cc:
50:d8:30:79:f9:1c:1a:46:2c:3a:4f:47:41:64:9b:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:FB:1D:D0:55:24:59:1E:01:1F:00:62:56:54:DD:8E:95:B0:7E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.238.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:f8:f7:4a:cd:de:2d:50:1e:29:0e:b5:dd:d4:c0:0e:1b:9f:
44:1a:77:05:8a:e5:5a:fa:9f:65:b7:a3:5f:7e:23:f6:00:5a:
86:7c:01:56:16:fb:f2:cf:6a:9c:9d:23:da:18:76:d8:5c:2e:
06:d9:e3:ce:18:8c:f6:56:bc:c7:ec:e1:0d:f6:74:56:67:c9:
25:1b:81:3b:ca:7d:82:32:79:a9:75:29:7d:20:0e:ea:3e:02:
7e:17:be:71:9a:5b:89:15:67:d6:fd:9b:c9:26:ca:47:4f:4d:
c3:d3:69:0f:b0:c9:31:85:a9:ef:61:e0:76:f5:90:0e:cf:0b:
01:cd:c2:cf:fe:1a:1c:5a:06:a0:a6:f3:d0:6b:b6:cb:47:f9:
5d:42:33:76:48:63:52:db:db:6a:8e:27:5a:93:70:a3:13:fc:
2e:5f:13:67:de:7e:6f:9a:8f:4c:2e:22:ae:4e:b7:7a:17:7b:
5a:1f:2c:46:0e:11:36:aa:48:ae:53:21:29:67:bc:96:69:fd:
73:b6:8d:a9:fb:65:83:8a:3f:b5:d5:e4:b5:cf:c8:7b:08:4e:
b7:80:3c:ab:38:aa:56:45:94:c0:7f:a9:19:45:c9:74:ff:31:
67:00:8e:b3:fd:36:79:4c:12:01:dd:04:33:1b:15:21:fe:c9:
bc:4c:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:26 2026 by rpki-client