Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer
File: a6spHHXSmuNRQl8zWSdvmWpHY4o.cer (raw, json)
Hash identifier: 0rXCVzSyyt4VRwiPOLOOZDczjBQBC2VQU0XnJ8WDlOI=
Subject key identifier: 6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C40
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jun 2026 08:21:31 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.192.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31808 (0x7c40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 2 08:21:31 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91BE2F6, serialNumber=6BAB291C75D29AE351425F3359276F996A47638A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:41:37:b4:07:0e:26:03:5e:64:66:11:0c:
58:aa:a0:cd:0e:44:5f:8a:6e:f3:a1:fa:e1:99:ed:
73:fd:4a:33:46:86:e9:f3:1e:8d:b0:ca:a9:07:9f:
ca:36:e7:c3:cb:fa:e2:a1:2e:e2:05:03:d4:2b:8e:
ef:e3:6d:25:07:2d:58:af:31:0e:07:16:77:15:72:
b4:cc:cd:e9:6c:26:82:c8:83:fd:fe:36:6e:7e:54:
a9:2c:0e:43:b5:1c:ab:bc:ee:cc:e9:c5:4f:17:60:
dd:72:d3:cb:8b:81:4e:4e:5c:09:81:2c:40:71:89:
38:f3:75:39:88:4b:a5:af:6f:c6:62:a1:70:5b:45:
1b:52:4a:80:97:54:0a:27:92:72:08:66:dc:b3:99:
26:ae:d9:42:9a:9f:ed:70:a1:60:28:31:92:18:55:
5f:07:48:72:4f:37:49:90:c6:cc:31:71:d3:e6:a8:
b0:eb:c0:f6:07:01:ea:ee:a6:5c:ad:4a:21:32:1c:
12:a2:b8:9c:6e:d1:97:3e:d3:68:33:b1:72:0f:f9:
c8:07:2e:8c:bb:b5:65:1f:30:82:23:08:04:de:ad:
c9:64:1f:f5:56:41:6f:90:d8:40:54:28:5b:45:3d:
c6:1e:57:65:83:ee:d1:79:d5:32:e4:64:72:fa:fa:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.192.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:9a:8c:c9:b5:8a:5f:ab:db:49:e7:58:38:8d:05:1b:bd:08:
d7:ea:b0:51:e2:0c:f9:37:17:bc:10:9e:12:0f:92:1b:cb:68:
7e:21:6e:84:b7:e8:54:73:83:1d:ec:2e:fb:d8:dc:cc:2d:95:
2c:bd:ad:c9:51:da:8f:1c:f3:1c:0e:a3:9e:90:f7:bf:09:ed:
68:96:84:84:c0:f5:8a:f7:64:5e:f1:b1:69:2c:3a:08:bc:0c:
e4:ab:ec:fd:cd:8c:7a:9d:1b:fa:c1:f0:bc:e1:34:02:5b:3a:
b5:d2:79:3a:74:42:6c:0e:c9:04:2a:94:e6:d0:0d:23:10:08:
85:96:61:45:c3:69:f0:45:25:1a:2b:67:eb:db:08:68:79:b6:
9a:b1:6f:67:8c:d6:36:09:02:03:58:2f:61:11:79:e1:fc:4d:
22:6c:fc:f1:1e:42:c8:68:13:cc:f0:1b:e2:53:f2:90:be:70:
8c:6f:ec:52:88:b4:78:81:bb:2b:2e:35:93:35:ff:e0:23:56:
5e:35:cf:b7:f6:6e:8d:8d:dc:e2:50:6b:4a:2a:47:8d:e9:7a:
7f:f6:d7:ba:8f:f8:99:95:9a:d6:b7:dc:6c:61:77:2b:48:1e:
d9:c2:22:f8:8f:9f:0e:45:53:1b:4c:16:47:86:01:f7:6d:7d:
d5:56:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:27 2026 by rpki-client