Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
File: _xOUBaa6BoyBp0rTX-yUkYJp2OE.cer (raw, json)
Hash identifier: S91cTtxQlY2SvG0Yxn3RyYzxGIK+E9+IorovfqasbmE=
Subject key identifier: FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7FB2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 02:51:37 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.194.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 14:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32690 (0x7fb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 30 02:51:37 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9139D67, serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:66:75:69:6d:04:db:80:ad:14:bf:05:84:
1c:4b:ea:40:9d:c8:ef:ac:48:b0:d9:3d:ef:4e:6f:
42:12:55:b2:fe:0c:8d:24:f0:69:0b:da:a8:94:bc:
88:0e:2d:16:f6:03:5b:8a:d5:e5:eb:0b:f2:03:f2:
70:bf:86:3a:d0:68:27:a6:b5:f3:99:fa:e2:83:e6:
5b:40:89:b3:7b:05:b8:0e:ae:0e:d0:fd:31:db:f5:
a2:67:9f:99:9f:1c:5c:e5:1e:ed:06:09:ba:5e:51:
7c:77:71:05:c1:0a:c2:bc:2f:5a:89:95:02:2a:5b:
02:0d:00:8f:68:48:f7:c6:2f:37:3f:2d:df:94:d9:
2a:9d:e2:1c:f2:e7:c9:76:aa:91:72:ba:9b:04:6f:
45:54:2a:88:c5:ca:30:61:4a:60:21:47:54:11:b5:
55:53:f0:fe:b3:fe:5c:55:38:11:63:33:37:59:75:
c6:63:72:9c:4b:8b:9a:7b:4f:45:6a:01:1b:8c:74:
e5:a5:90:d2:3c:82:60:7a:d2:7b:57:4a:dd:d3:b1:
e7:2e:63:72:28:17:fe:cd:81:71:4d:40:e3:2c:6c:
5e:52:29:8b:ab:28:69:6e:6e:c2:55:41:61:5f:8f:
73:64:74:6d:cc:a8:fd:86:72:83:fe:f4:88:e8:c5:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:46:70:12:63:46:f3:7b:6c:ef:8d:d5:67:4e:be:98:53:dc:
18:a0:33:12:70:1d:86:a8:2a:e7:2d:99:e8:99:34:76:e5:00:
c6:33:f4:05:e8:32:b6:a2:a9:51:f1:0c:25:40:d3:72:c7:7b:
a1:7c:84:2b:d0:12:72:06:06:6f:6c:05:b2:91:ca:ea:70:23:
7a:bf:8e:c1:9c:94:bf:4b:68:e3:77:de:b9:7f:2f:ea:e6:03:
01:a8:b2:62:16:05:ce:1d:45:ae:45:00:56:8b:be:e6:b7:67:
35:b1:2c:f0:ef:4f:1c:e9:79:72:1e:87:5d:5b:06:1d:75:e0:
f5:ce:9e:5c:6c:41:4d:01:17:87:aa:39:75:d6:49:aa:33:5c:
e9:4c:6c:7b:8e:31:66:37:b7:bb:d2:2f:59:b5:d9:0e:e0:87:
13:08:d6:6f:0f:7a:f5:4c:21:ce:b2:1a:b5:28:06:26:89:25:
39:73:14:7f:07:43:28:4b:fe:26:39:f4:af:21:64:a7:6e:5d:
20:40:79:07:f9:c1:3f:b4:97:33:b4:94:b1:ea:fc:23:67:b1:
1f:d7:d5:cd:1d:c8:c8:2b:ae:e0:17:85:be:86:d5:36:b6:53:
a5:f4:94:60:d6:03:9d:c3:e8:f5:72:00:46:19:a9:db:dc:f1:
81:cb:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:47 2026 by rpki-client