
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
File: TmiwSN0926X0ePH9KIqGGLqfq6o.cer (raw, json)
Hash identifier: NPp4KgkGu46lNAy1uHYB1V78y9vYf2hYLJuEaKDtZss=
Subject key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D49
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jun 2026 06:27:23 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32073 (0x7d49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 19 06:27:23 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:b6:8d:d3:e0:83:84:9d:cf:7b:41:f9:7b:
48:c4:a8:b9:a9:59:93:76:76:0f:09:3f:6b:0d:81:
7a:13:30:b5:69:4e:9d:f3:d0:d9:36:94:c8:f9:02:
65:b2:6b:2c:6c:39:42:17:27:36:91:da:6b:44:39:
23:15:a0:f9:05:6c:3d:cc:f2:a1:6c:e2:ad:05:b3:
59:cb:94:ea:f6:96:7f:40:46:2b:83:27:73:b5:77:
28:0b:15:35:c1:98:7f:00:0e:6e:ad:db:54:c2:17:
b4:f4:42:98:7a:16:f0:ec:0f:4a:5f:8d:4c:d3:b2:
e2:f0:c7:26:ae:1c:c7:c3:f0:26:d9:ed:15:ea:d0:
25:aa:45:f7:7e:3a:e8:e3:2d:59:4c:d7:19:3d:c5:
a8:a6:7a:d0:84:b1:49:ff:78:41:40:da:b6:8a:e0:
aa:a0:cd:a8:79:d8:42:db:a8:58:22:bb:e0:f3:5c:
13:f9:02:a6:ea:28:62:a6:2c:68:0d:25:9a:d9:e5:
48:66:e0:46:63:57:b4:1e:6a:8c:61:9d:e8:95:93:
86:83:82:45:88:73:08:4b:50:85:70:b8:3a:1b:c8:
8f:15:2f:bf:83:a6:44:68:6f:e4:2d:61:97:90:e6:
50:a4:5c:14:6d:f7:92:97:99:40:7f:51:13:2a:2d:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.224.0/23
Signature Algorithm: sha256WithRSAEncryption
09:45:2a:24:f1:b2:6c:1f:57:40:a5:c2:81:4a:35:2e:4a:da:
85:bd:7e:40:4f:5f:07:05:85:95:9e:cc:03:bf:c9:f6:69:38:
55:7e:63:cd:bd:2d:8e:91:25:30:ad:fe:75:fb:57:41:00:6c:
29:59:f1:61:01:7f:71:49:f8:79:b7:a7:82:e4:d9:b5:d9:25:
76:4b:01:98:7e:cb:1d:ae:de:06:ef:48:ad:13:e3:5e:0d:25:
d1:34:4c:7d:47:9c:e2:85:13:5e:54:ca:1a:d6:85:cf:e4:c6:
1b:10:da:9d:4b:d7:33:46:65:a8:b7:f0:12:a8:7b:e8:34:1b:
ca:b2:4e:49:70:e8:69:9e:35:26:2a:33:f5:ee:73:df:e2:d1:
df:16:59:7c:37:7e:b0:22:a6:2d:d5:8f:9c:78:4a:7f:d1:7f:
82:35:f0:be:39:7d:47:e9:6c:d5:3f:c9:1a:aa:e1:f4:c5:e0:
22:95:12:c0:04:17:c0:d5:eb:3e:9d:70:9b:e6:1e:bc:ae:f7:
6b:9e:8d:6c:8c:09:e0:a4:86:51:44:30:4d:33:fe:7a:48:da:
01:63:cb:13:85:41:15:c1:6e:ed:e3:c9:71:99:b2:50:52:27:
11:b6:8d:08:e8:bc:c3:43:fb:88:8a:55:d6:71:2c:55:e7:11:
c2:c0:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:17:38 2026 by rpki-client