Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer (raw, json)
Hash identifier: YZ0ss/+9IV4+L6Bizd3Y6HOQTHtwFh6EL87cyGbohQc=
Subject key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 11:14:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 15:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31267 (0x7a23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 23 11:14:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:85:7c:dc:61:ad:54:15:f2:32:27:a2:71:
6c:7a:0b:f0:0b:07:f5:57:9a:c0:d4:7e:64:02:2a:
c4:2d:36:1f:78:bf:3a:f6:d3:3f:e1:e1:ce:c6:f7:
7f:90:de:a1:e0:56:ac:f3:3d:6c:91:85:97:66:56:
a2:a7:35:46:ea:d0:79:40:92:a6:6a:5b:32:b9:df:
a3:70:d0:86:53:9a:4c:9e:8a:a6:39:f4:8b:3a:d6:
1e:9c:a6:ce:3a:1e:31:0f:18:40:7d:ae:9f:46:e4:
7d:de:e9:35:60:22:4c:13:01:a1:49:fb:2f:82:77:
39:30:2e:05:2b:fa:05:a4:b4:79:c3:b5:d4:42:bc:
88:c4:9a:20:e0:11:15:db:d2:c0:f8:bb:59:8c:8b:
13:f0:3b:4e:d4:f8:d9:0c:6c:e5:8a:d1:64:3c:8a:
33:f3:d4:99:ba:06:ef:ce:59:c4:46:9a:90:74:75:
b5:a6:65:8d:c2:e7:02:23:2f:58:46:22:23:ca:8a:
9e:3f:47:a2:61:86:34:ad:00:84:aa:43:bc:7d:85:
44:27:1b:88:f9:fb:05:95:10:59:b4:e2:10:e6:2e:
e4:cf:ce:96:0f:65:ea:63:99:68:22:b8:fb:7b:53:
20:29:64:6b:53:a9:6c:8f:bf:10:af:72:98:ab:6f:
d2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.32.0/23
Signature Algorithm: sha256WithRSAEncryption
03:4a:a5:5c:03:a0:40:75:e9:1e:c3:bf:7d:1e:73:1f:84:d9:
f0:26:b0:4e:4a:3e:77:d9:45:ea:70:ef:98:48:08:b0:92:cb:
bb:af:18:ff:ec:22:18:96:88:e8:89:6f:f0:1c:37:29:1a:fb:
ee:37:c4:ae:69:e0:42:0d:78:5a:ed:d2:f8:59:63:d4:69:6d:
0c:dd:bc:a7:95:a5:fa:45:23:7c:74:ff:49:b4:fc:8f:1c:ea:
8b:94:ae:e7:fb:01:f2:07:f0:29:2d:47:8e:72:65:78:49:e5:
57:f3:ff:fa:e0:97:cf:c0:1f:0f:19:b0:18:8e:50:39:e5:37:
3b:4a:17:aa:9a:99:69:53:a5:56:d4:eb:62:af:42:44:0e:1b:
4e:6b:4d:cf:38:c0:14:db:7d:4c:94:65:a6:84:99:56:5a:20:
0a:c2:38:fc:d7:ef:90:1c:8c:6e:81:30:d8:cc:f0:f0:a9:09:
b6:0c:e9:61:e3:b7:94:53:0f:8e:1c:c4:6d:b8:95:a5:c0:c0:
92:0b:23:f7:dd:b8:55:78:70:d8:09:69:34:08:b1:85:c2:02:
c2:90:54:7d:ba:1d:7b:af:0d:7a:28:11:aa:38:61:fc:17:90:
fb:c0:1f:dc:16:e2:a7:0e:50:09:9a:1c:ce:92:a5:d7:93:07:
21:58:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:45:42 2026 by rpki-client