Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer (raw, json)
Hash identifier: yC1XyS+sDWpbOChlgFwAT7YnvIFsW0jtOMFUEOe/ojA=
Subject key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7FF1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Aug 2026 13:49:51 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32753 (0x7ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 1 13:49:51 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:cf:36:85:8c:56:f5:fd:9c:ed:e6:51:e5:
ab:24:8c:29:8d:98:be:39:b7:13:27:d9:a5:3f:f0:
2f:fe:fb:93:df:34:50:37:b1:2e:92:e6:58:bb:e7:
16:e2:17:d1:75:a3:49:03:5f:8a:75:61:93:54:d4:
3a:e0:68:ec:47:63:6c:57:15:89:36:dc:ea:41:b0:
1a:7b:d9:fa:c5:90:73:3f:64:cb:1d:e2:65:45:a3:
83:78:59:e7:1b:7b:e2:79:96:3d:70:4b:f8:43:00:
5a:0a:dd:71:e9:63:dd:63:83:f0:4d:83:92:2c:82:
76:f5:b8:7c:a4:be:71:f5:9b:60:8d:fc:6c:82:6f:
c5:8b:a3:16:b8:d0:c9:1c:c6:79:78:53:69:cb:9e:
78:6f:c8:2b:95:22:51:00:0a:43:58:30:92:46:e3:
5a:86:5b:8d:69:88:d6:b1:7a:9b:47:35:e1:52:63:
7b:22:5f:8f:3c:4b:12:3a:c8:f3:71:bc:4a:18:fd:
75:36:17:b0:fa:c4:ae:48:33:c5:00:e6:65:1f:db:
f4:d2:4d:a1:e3:0e:0e:6a:50:f3:ee:4a:31:90:64:
21:b2:f8:d0:d5:6d:6e:d3:0b:51:e7:43:3f:82:ee:
e8:a1:09:1d:b6:e1:49:bb:fc:62:cd:16:68:f1:c4:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.128.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:8c:ae:15:b7:c2:33:59:77:5b:63:77:08:be:cf:38:ba:52:
37:e9:bf:d5:61:6e:1d:03:85:45:d0:3e:1e:98:32:6b:38:d7:
c5:61:f7:ba:9b:c3:5e:e9:d7:3f:d3:8b:b7:60:3d:2a:bd:4a:
58:9e:ac:3c:f8:f4:9a:08:11:36:99:02:8a:84:f3:3f:56:64:
7f:e0:d6:58:28:66:6e:b6:36:56:88:7a:d9:20:3e:f3:5a:c9:
44:11:b9:bd:ce:96:9f:a9:23:f3:ed:6b:b7:4f:f1:8e:a1:84:
7c:14:31:d6:eb:9e:0e:4d:c8:e9:97:3e:3d:f1:c8:e7:93:06:
0e:26:c4:d7:61:bd:98:b1:1e:82:2c:0a:92:28:f6:05:2a:b8:
d8:e6:bb:e0:6c:18:a2:cb:8a:78:d5:da:1a:60:97:66:0d:0f:
00:f3:5b:f1:9f:df:e2:97:8e:b4:19:36:2d:3d:ea:6d:be:73:
e3:1a:ae:bc:5e:64:9b:9f:cd:8b:7b:b7:1a:c0:ce:3a:7d:74:
96:f5:41:88:b5:a9:63:66:8a:27:81:35:8a:b0:07:ca:18:ca:
d6:59:d4:f0:19:e1:70:92:4c:e8:99:1f:d9:3e:f5:3f:09:d2:
03:da:71:e6:4a:88:24:34:70:7f:27:07:1c:a3:17:2d:ee:fd:
96:af:e2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:53 2026 by rpki-client