Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Js6lcSyYfVN6eITq8DUAFr8UxMY.cer
File: Js6lcSyYfVN6eITq8DUAFr8UxMY.cer (raw, json)
Hash identifier: i4SgueBLDlL4+5jmxVovaUtyOZ3Mt9G00ggrCZHhbWU=
Subject key identifier: 26:CE:A5:71:2C:98:7D:53:7A:78:84:EA:F0:35:00:16:BF:14:C4:C6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80DB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 01:14:44 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.152.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32987 (0x80db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 18 01:14:44 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91FAB2C, serialNumber=26CEA5712C987D537A7884EAF0350016BF14C4C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:36:75:ec:ff:ed:3f:60:32:83:74:4c:0f:
07:67:c1:46:8e:54:3a:74:38:a9:e5:b3:b6:30:3e:
63:11:11:6b:80:e5:6a:c3:65:e3:5c:89:c0:94:a8:
be:5d:dc:c6:67:18:fe:a7:d9:e9:e4:a1:4f:7b:0c:
7d:e3:5b:d3:32:1f:5f:8b:ed:fa:32:be:3b:54:fa:
0e:fb:4b:28:7c:19:4a:37:ec:ef:2c:18:62:da:6b:
4f:f4:88:b4:9c:a7:54:1e:a7:28:e0:31:fd:1b:ef:
30:24:34:97:b7:a5:60:fc:63:77:ca:5e:48:f7:de:
01:15:df:64:9b:2f:2a:9a:c4:07:71:e1:de:1c:b2:
2b:a7:3d:e1:f9:0e:08:f3:31:5e:df:ce:4e:5c:87:
18:40:b4:e6:4d:29:5b:ac:a9:b1:33:a3:d5:0b:a3:
a1:97:26:89:86:cc:b3:f1:67:21:80:6e:50:6c:b0:
51:05:33:91:c4:62:eb:37:d8:79:9d:cf:be:71:44:
f6:72:52:50:1e:2c:ff:f4:6d:9e:d4:ef:04:02:72:
a7:d4:c2:22:cc:12:88:64:bc:50:36:35:26:08:ba:
06:e4:42:56:3d:04:40:14:39:6e:b0:cb:31:41:58:
81:34:70:6f:c6:0e:7e:76:13:5c:e1:f1:a3:ee:c5:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:A5:71:2C:98:7D:53:7A:78:84:EA:F0:35:00:16:BF:14:C4:C6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.152.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ac:19:88:28:39:f0:1b:61:97:bb:0e:9e:19:33:71:7c:51:
42:3b:12:57:87:ab:64:67:e3:f2:79:7f:c7:c3:e2:25:f7:42:
62:4d:d7:a4:bb:a2:f5:50:e6:06:8b:65:a6:61:bc:af:54:a4:
25:00:1c:f5:a1:6b:c6:a8:7a:88:b8:52:11:ac:be:64:60:a5:
0e:53:76:34:a3:14:e9:98:d8:7a:00:0f:d3:2a:2b:1c:09:e5:
87:db:f1:c5:76:dc:34:c0:ae:d0:a8:0e:e2:de:27:ab:c9:fe:
54:88:bb:57:78:40:13:cc:57:06:3c:dc:f1:9a:85:14:ad:df:
76:c1:48:aa:70:6e:eb:c4:f5:26:ce:30:eb:c7:f5:83:ee:ab:
5f:77:2f:22:55:4a:16:b2:91:97:af:b8:c9:93:66:7d:69:94:
8c:aa:67:35:e5:28:f2:4c:75:2a:c9:e5:f7:e5:5f:f5:0a:de:
df:35:9a:82:0c:6b:ed:67:58:57:78:dc:de:1c:7c:d2:53:69:
79:1b:10:f5:1d:4e:46:d2:b3:4f:cb:de:90:cc:1a:56:0b:6d:
21:6b:63:da:92:09:e0:99:ec:e8:be:3f:8f:e1:19:4a:b8:78:
95:3a:37:26:de:67:c3:ff:b4:72:80:b7:9e:26:84:ed:11:d8:
90:ae:e1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:14:55 2026 by rpki-client