Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer (raw, json)
Hash identifier: /XJX6LWq78XI/lj7n96YodtMdywP4ShXV4TICoaEfrM=
Subject key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 848C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Nov 2026 05:31:25 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.248.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33932 (0x848c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 3 05:31:25 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:48:cd:2e:a6:f0:ec:38:81:99:59:d3:71:
14:df:e1:05:33:f2:93:00:a5:6e:65:49:9b:16:82:
ef:82:28:f8:9c:e1:6f:df:e6:95:5b:a8:d1:47:ec:
43:92:e2:40:c7:c1:f0:b0:2e:e0:09:88:ad:55:33:
db:5c:dc:f0:a1:ce:98:71:c8:21:65:26:e7:43:01:
37:5f:88:59:e1:ba:58:f2:4f:d5:2b:41:f0:b6:10:
07:b3:34:6f:6c:81:d7:a2:1c:11:b1:95:64:1e:8b:
a8:80:ca:ae:a5:8c:e5:08:51:53:9d:00:0e:82:a4:
ba:14:6e:bd:c7:40:20:59:2a:e9:86:92:9d:a7:c2:
d0:cc:78:55:72:e7:f8:73:ce:9c:a3:f1:27:ba:5c:
bf:1b:67:87:fe:00:71:1b:00:42:44:7b:96:1c:bd:
83:70:2d:b4:50:ef:93:8c:75:36:b5:9f:57:f9:16:
6c:ab:9e:3e:17:b0:d8:7c:6b:0f:66:a3:d5:cd:d7:
ad:ec:3e:54:18:3f:37:2d:cd:38:8c:9e:65:13:fb:
a1:15:68:8b:92:23:fd:5e:0a:17:fa:5f:88:c4:97:
88:39:fa:dd:2d:05:23:91:fb:06:56:1c:16:c8:f8:
0b:0d:1d:8d:b6:b4:d2:7f:a0:5c:0e:a4:ac:20:e8:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.248.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:e8:e2:20:3f:1b:52:3a:38:21:65:2f:9e:5a:c6:81:58:da:
6e:a1:57:95:75:50:b3:25:c9:d6:2e:88:7b:93:e7:ee:5d:9e:
7b:18:5b:dd:9b:98:5e:90:01:10:f4:04:14:f5:57:41:d3:39:
ad:25:20:01:bd:84:06:d7:82:b2:50:06:50:50:6e:fc:64:9b:
de:7f:81:56:41:3c:5d:a6:eb:eb:78:6b:dc:f4:ae:03:18:90:
9a:08:68:68:4b:d8:12:fb:cc:7e:1b:21:c2:d5:dd:4a:41:5a:
33:06:6b:cb:04:6a:db:06:61:97:50:96:51:fb:7e:bf:69:42:
c1:03:3f:8e:cb:71:e1:c7:d1:5b:a1:44:47:73:b2:e8:b5:ef:
06:4f:db:ca:a2:d2:fd:d7:7f:d4:38:ed:7d:97:f0:c8:1a:93:
1f:5b:53:3c:b6:8c:e4:ca:bd:b6:97:49:a2:d8:67:42:da:eb:
d6:9a:bf:61:8b:c3:e2:f7:61:2a:73:18:71:3b:d9:ae:b3:a5:
a6:a7:b6:13:d7:43:0d:b1:06:c4:87:79:a6:9e:a3:e0:e9:6b:
11:04:b3:24:62:d7:32:4a:80:bd:c4:23:5c:ad:13:3c:96:96:
ac:00:af:b6:0a:d5:b9:54:48:39:b5:15:78:ac:66:57:62:86:
5e:9e:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 06:30:59 2026 by rpki-client