
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M75U--jz9D8AobigQe8meHEhyn4.cer
File: M75U--jz9D8AobigQe8meHEhyn4.cer (raw, json)
Hash identifier: 0A72ggj0ffW1lLxwFHtcd1VoC54QH2WG/ICY7DGsJ7Y=
Subject key identifier: 33:BE:54:FB:E8:F3:F4:3F:00:A1:B8:A0:41:EF:26:78:71:21:CA:7E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/M75U--jz9D8AobigQe8meHEhyn4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Sep 2026 04:45:05 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.60.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33445 (0x82a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 24 04:45:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91618CC, serialNumber=33BE54FBE8F3F43F00A1B8A041EF26787121CA7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:e7:f0:4b:ae:7f:df:25:44:92:d7:40:4d:
9f:ca:58:11:cb:26:fb:45:46:a0:7a:27:11:a6:2c:
49:ed:d3:10:05:9a:3a:8e:0f:fd:2d:43:73:f0:5e:
56:e9:74:57:e8:cf:ea:3c:65:7a:52:28:3c:8a:73:
d2:6b:61:27:b1:0a:fb:43:08:38:18:e1:94:3b:02:
68:4b:a4:99:8c:93:d4:9a:7d:b3:0a:d0:20:c2:37:
59:40:14:f8:d4:8d:98:77:7d:84:0f:8c:ca:e6:23:
55:42:25:49:fc:35:fe:75:26:f7:4c:18:12:6f:86:
f9:40:f9:75:99:1a:ab:de:3c:3d:bd:05:53:cc:b2:
49:af:8b:b2:6b:59:60:f0:b9:b7:83:6d:23:8e:22:
49:a3:b3:b7:c0:c1:32:d1:9e:66:6d:9c:9a:7f:ad:
a1:b3:1e:8c:da:de:ba:08:e2:ec:a0:b9:91:4a:c0:
d7:fd:6b:a6:59:87:cd:de:a5:ca:54:7b:13:89:2e:
32:0d:52:18:c8:19:b6:2e:17:4a:26:9a:0e:96:5f:
a4:04:a6:0b:aa:f2:61:46:71:51:8c:26:4d:02:af:
99:0b:52:0e:91:bf:6d:0b:17:a1:ee:41:ba:25:45:
c7:82:63:42:bf:2d:7f:60:ae:d6:48:4a:e6:87:26:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:54:FB:E8:F3:F4:3F:00:A1:B8:A0:41:EF:26:78:71:21:CA:7E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/M75U--jz9D8AobigQe8meHEhyn4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:0a:ba:98:2f:ee:ec:64:e4:e4:f2:34:8e:1b:06:e6:ac:ad:
82:1e:0c:df:da:e2:18:b6:5d:f6:f1:3e:a4:0b:f3:53:aa:90:
94:51:b9:c1:d4:7c:d3:bc:7a:dd:5c:39:c3:36:e8:04:6f:45:
70:c0:f8:13:c0:98:10:49:47:ac:35:87:91:e1:0e:f7:3e:ea:
40:32:13:b7:12:da:0c:e2:7d:cf:19:af:0e:07:12:f3:6a:81:
57:e3:37:f1:78:94:bc:7c:74:49:81:de:07:d8:7c:ff:15:6e:
cd:dc:71:32:31:2c:5e:81:04:8c:52:99:55:fd:d5:0e:0a:65:
0e:99:9b:9a:1a:90:e6:c0:e1:c3:c7:67:14:85:1b:cc:5a:68:
82:49:c5:74:80:af:64:d0:69:6d:4f:58:f2:a8:ab:b0:08:e9:
3b:bc:f6:6d:4a:03:49:a8:ad:56:b7:eb:5b:4d:5e:7e:98:36:
9e:38:20:85:57:69:d8:e6:04:0b:07:33:d2:bc:5f:7f:dc:2e:
52:c9:ba:e1:c6:84:df:a5:2a:3c:96:15:b7:ad:1a:0b:5e:c9:
27:be:b1:5c:45:50:2d:16:a3:a4:97:f8:98:79:0f:33:72:6e:
3d:9f:a8:30:36:76:f4:21:3f:fa:bd:56:cf:a9:e8:33:9c:59:
75:41:31:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:57 2026 by rpki-client