
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FnODv1SihfFeIlHuqSMNgzal73o.cer
File: FnODv1SihfFeIlHuqSMNgzal73o.cer (raw, json)
Hash identifier: auU6bsodBa6ASY00Ehwqe/TWPwJmwpSU0PHk2E8PSsU=
Subject key identifier: 16:73:83:BF:54:A2:85:F1:5E:22:51:EE:A9:23:0D:83:36:A5:EF:7A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8080
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 09 Aug 2026 18:45:36 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.146.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 14:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32896 (0x8080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 9 18:45:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91E0DF1, serialNumber=167383BF54A285F15E2251EEA9230D8336A5EF7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:e7:65:b5:b6:81:27:ad:12:e4:c5:95:fa:
5e:69:a0:9e:d8:13:bd:5c:89:8d:e1:06:8a:8c:45:
d4:2e:c1:86:c0:31:1e:29:c7:9e:95:35:4f:a9:c4:
79:1a:84:fb:50:b0:6b:f0:5f:ff:8f:c0:d9:dc:78:
7d:b2:0f:81:ee:f7:7c:2a:44:0f:4b:f7:4b:82:61:
4f:a6:cf:e6:45:f0:8b:06:12:41:a8:15:a3:a7:15:
ea:78:c0:bc:33:f9:be:2d:c7:54:21:fa:95:bb:ec:
17:50:f6:61:da:33:cd:bb:f0:42:b5:c6:bf:73:02:
67:a1:97:6a:b1:55:c9:05:06:37:fa:22:53:59:f9:
95:e1:66:46:d9:7d:c6:84:e5:a7:82:7e:ba:1a:f0:
6f:2a:99:4e:e9:b9:ee:b1:de:3f:18:22:90:63:00:
0f:ee:4c:d9:cb:36:cb:c7:12:cc:a0:c3:02:72:88:
c2:9b:08:6a:a8:74:3b:29:f0:f0:c7:93:25:c1:42:
44:e6:fe:c8:fc:48:a3:0c:31:05:88:bb:88:a3:f3:
54:c4:ac:9f:e5:ce:0b:f1:f9:d5:1c:ba:7f:46:df:
40:0c:47:a5:e8:f5:87:b8:fc:cb:58:4d:6d:77:bd:
a3:0b:dc:1b:3f:be:87:4e:57:62:d9:7e:07:99:5d:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:73:83:BF:54:A2:85:F1:5E:22:51:EE:A9:23:0D:83:36:A5:EF:7A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.146.0/23
Signature Algorithm: sha256WithRSAEncryption
85:8d:23:59:ba:4d:ca:5c:16:25:b5:e2:0a:d1:4f:a3:62:f0:
f9:8a:67:5b:43:43:85:7c:f0:b9:43:32:30:d8:e3:03:a9:9b:
ac:03:87:ed:ea:c0:1e:7e:42:b3:9b:6d:1b:8b:96:6d:d9:f0:
7c:e3:0e:7d:bd:62:aa:44:7e:24:5c:ca:5f:32:cd:32:5d:9b:
d3:c0:96:b6:8a:3d:87:e0:87:19:da:f0:8c:d7:b2:a4:84:fd:
95:78:5d:af:ef:7e:bf:1a:5a:40:81:67:81:19:f9:9e:20:70:
82:64:74:e9:28:ae:43:00:6a:b1:ec:77:e8:50:2a:b1:37:7b:
0b:58:5c:c6:93:1f:03:49:64:3d:67:7b:9d:5b:d7:fc:27:93:
9b:b9:21:c3:a2:bf:6b:af:b8:1c:c8:a7:af:d2:8e:6d:64:8b:
d9:91:34:ea:df:98:0e:45:86:ee:0b:d3:43:bd:c1:6f:9d:54:
10:5e:94:c0:80:1c:ea:4b:b9:87:cc:2a:b2:62:5e:80:18:ba:
72:9d:16:dc:b6:14:65:6c:92:e6:bd:13:f2:a1:33:b5:8a:7e:
88:e8:4c:4d:88:d8:23:c2:bb:51:9d:ae:fb:74:ba:ab:74:a6:
d3:00:13:fc:60:78:ff:50:b2:89:21:cf:73:29:ec:5a:f3:44:
03:23:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:44 2026 by rpki-client