Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
File: M_iOrx5M4PGhh31J75fA5_7cA5o.cer (raw, json)
Hash identifier: JD7YcVlRUUN14gLZTqUYIKInZhZdsqJ5x+Mz+WdaOjg=
Subject key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 15 Aug 2026 13:04:04 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 65.181.0.0/19
IP: 168.140.240.0/20
IP: 206.83.96.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32961 (0x80c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 15 13:04:04 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:07:d4:67:12:83:cc:67:cf:ff:8e:cc:d5:
49:3c:e2:7b:ec:67:cc:37:ea:6d:78:5d:f3:b6:91:
24:5b:0c:b7:8f:ae:58:ba:b3:dd:05:ff:e2:6f:46:
6e:b3:64:4e:e0:b9:3b:61:07:20:18:ab:73:ff:89:
d4:85:5f:aa:76:b6:b0:8c:35:60:72:44:21:43:b3:
44:03:1b:2f:a9:e8:e9:4d:c4:b0:dc:50:67:35:a9:
ca:59:de:d7:aa:99:50:5c:c0:fa:97:eb:b8:48:77:
9a:72:3f:6e:19:4e:c3:2e:70:44:94:8b:de:e6:ab:
1c:ed:48:4d:99:30:96:46:eb:31:f0:b0:a4:2b:67:
b5:64:a2:4c:6c:cc:e8:71:f2:0b:05:43:fb:2f:59:
a8:53:94:d0:2c:72:21:cc:7f:11:f7:e6:83:52:46:
35:61:6c:3a:53:35:89:6b:72:f4:98:2d:49:34:a3:
06:b7:e3:47:35:2a:b4:c0:81:e0:80:92:6e:54:a5:
3a:63:51:08:80:1b:94:bd:28:2e:69:b4:6d:4e:8b:
af:3a:6b:3b:b4:3e:a5:64:13:91:54:57:fc:4f:95:
08:65:f4:00:be:89:ac:e4:19:f5:45:98:fd:7b:54:
e0:39:7e:8e:f3:9a:fb:89:0d:72:c7:b8:2d:f6:3d:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
65.181.0.0/19
168.140.240.0/20
206.83.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:ee:12:a0:40:54:ef:1a:fd:0d:1a:4d:7b:04:3d:6b:ae:f6:
2b:d7:cf:e8:3b:e5:19:17:30:d9:ae:ee:6c:e1:1a:0c:dc:d6:
a1:77:76:0b:04:3f:4c:f5:d1:a9:da:c7:ee:9f:36:40:5d:c7:
d5:c1:9c:08:74:c2:49:ca:a6:13:b2:e7:45:45:7b:80:86:db:
4b:57:82:29:51:1f:6b:b4:bf:b5:e7:f5:69:ef:ea:28:9b:c1:
8e:70:13:33:53:8b:49:b5:5b:5e:09:0f:fd:0f:2a:71:fa:69:
ab:60:4c:2b:75:c1:da:04:f3:27:a3:77:17:78:82:d7:2f:43:
4c:00:df:57:23:67:79:80:db:a6:76:50:75:25:d2:b9:11:c1:
64:5a:b1:dc:38:bb:0d:db:6f:77:16:7a:57:fa:6b:47:5d:07:
40:39:66:04:32:77:03:38:e3:a3:e5:f4:43:00:12:57:67:40:
04:59:4a:de:ab:4b:c2:1d:98:75:86:9f:a2:9c:15:ad:f3:8e:
fc:2f:a6:09:2d:ab:4f:fc:ae:5f:3c:86:d0:0e:d5:58:12:88:
dc:90:a8:ac:4c:66:a5:8e:48:5c:27:08:51:2a:97:bc:49:2e:
7d:1a:48:45:f3:21:ce:b4:e1:48:74:48:f3:10:1b:d8:62:b8:
8d:9a:96:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:46:37 2026 by rpki-client