
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
File: _7jr91F1lPQetjZXPZajVwaXSbk.cer (raw, json)
Hash identifier: plr3pZqThg0BP5TUiRSAhlY8mFDy83nHmN64vOtwa1E=
Subject key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7DA8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Jun 2026 13:49:46 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.250.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32168 (0x7da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 26 13:49:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:f6:80:92:e4:11:3f:d7:57:ec:76:7a:96:
de:35:fd:4d:13:20:b5:43:76:4c:dc:b0:48:24:0d:
97:89:c6:61:00:9f:17:89:87:3c:04:01:fb:4f:5a:
7b:ee:d3:22:23:32:52:a7:39:ef:d2:ea:20:d8:68:
7f:e2:a2:3e:b2:31:00:33:16:bd:64:76:d2:c7:08:
64:68:71:37:56:17:ee:0f:1f:b9:79:36:e1:0c:37:
3e:87:f4:ee:4d:d5:29:e1:2b:8b:ed:06:24:8f:50:
ad:34:f6:f9:79:14:5e:29:64:76:90:83:3e:e3:b1:
89:cd:37:2d:39:89:89:7d:d7:e0:4b:cd:96:ea:5f:
fe:b6:91:9f:50:e4:c4:a9:af:ec:ea:0c:fd:6f:4d:
e2:2e:d4:3d:10:7d:b1:de:3d:2a:2f:0b:39:ed:69:
62:fb:d0:5a:36:88:60:d5:3b:f0:36:8e:b5:e9:a2:
c0:a4:c9:ee:d2:ac:b2:a4:8c:ee:c1:99:3a:ad:98:
5f:5f:7d:44:87:7a:8b:8c:79:85:c6:86:f5:51:88:
96:57:82:f4:43:e6:0d:b9:91:f8:2e:e3:74:10:ad:
0c:9e:b7:97:c3:8a:74:65:b9:6a:ae:a7:ff:97:85:
56:94:41:1e:3d:29:49:ce:a5:c1:17:f9:0f:ab:a4:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.250.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:8b:15:e5:45:ae:8f:c0:13:93:36:ad:25:fb:25:f5:b9:1c:
45:88:ec:6b:bb:6e:5e:3d:50:87:ab:12:30:3e:1f:9b:ee:eb:
61:d0:aa:09:fd:08:37:1e:14:23:49:f0:e1:0f:6b:fe:13:2c:
79:b6:b3:c2:25:39:83:52:3b:50:3d:b9:e0:72:08:19:c5:4e:
c2:17:1f:4b:98:a4:4f:a9:b3:e9:da:e2:05:f7:e1:fb:e8:5e:
2c:70:2e:20:dc:ee:d3:cf:11:c1:7e:1a:a3:6b:59:05:92:17:
ef:37:03:86:8d:a1:6c:6e:df:39:44:9b:07:a7:8a:72:63:ff:
13:c0:60:a2:40:e1:ac:5d:8f:18:98:e9:5e:73:44:2c:11:a3:
62:83:d4:d1:af:58:9f:cb:af:f9:50:4b:84:14:8a:a1:b1:10:
24:73:d7:91:96:07:e3:48:b8:2a:da:e5:f1:ef:86:e3:f9:bd:
c0:2f:40:de:e6:fd:fa:6f:7d:c0:3e:da:00:e7:61:34:da:cd:
63:6a:23:d6:5c:91:d9:a7:a1:c5:8d:35:4d:e8:53:50:94:19:
bf:6d:24:b2:21:76:5b:67:d0:27:3d:d9:ff:93:75:fe:cf:0b:
23:d7:43:5d:c1:12:c7:82:6c:a6:57:ea:eb:21:5b:50:c9:bb:
24:b5:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:53 2026 by rpki-client