Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer (raw, json)
Hash identifier: zN0Pwa/0lz56xuu12BREt/Dw3iHIWOM82yiMccyELKE=
Subject key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7999
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Apr 2026 14:21:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 129.94.0.0/16
IP: 131.236.0.0/16
IP: 149.171.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31129 (0x7999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 7 14:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b9:fb:45:e5:8b:be:c2:64:df:b2:22:06:88:
2a:e0:b4:ba:6d:1d:a5:c2:91:f8:87:c2:2d:a0:06:
f4:47:9f:19:e9:c5:6a:e9:9b:f1:77:b7:7c:20:a7:
13:92:83:3f:e3:49:14:b3:fe:9d:cf:c3:7f:6e:94:
01:d0:7e:a3:4d:c7:f8:c0:a3:df:f0:af:76:42:65:
1f:57:8d:69:4e:9a:95:4b:cb:bf:c7:b8:b7:0d:5a:
ed:ff:bb:53:92:a7:2b:12:fe:b8:bf:62:89:95:73:
82:7d:70:50:2a:66:97:48:b0:ad:28:c5:21:0c:98:
3b:07:1a:69:a2:36:00:97:7e:fb:c5:96:68:7c:fb:
5f:cc:ca:74:66:6c:57:dc:63:cc:a2:62:7a:a2:da:
7c:8a:af:60:49:42:6e:17:44:1f:e2:ec:1e:22:b1:
0f:8d:29:3c:51:01:4b:23:f8:42:4b:a3:48:c8:e4:
fb:50:86:d1:d5:2d:cd:e6:50:9a:78:79:84:70:a8:
08:c8:8b:40:35:c6:18:34:a7:ff:fd:fe:ad:ab:bd:
b2:c5:06:a0:92:8e:64:99:f6:ba:a4:5f:6d:7f:09:
fb:44:46:ba:3a:7d:09:ce:73:70:a2:9e:b6:8f:14:
fd:ad:da:9a:2b:43:22:d6:89:c9:5d:fd:5d:fd:9e:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.94.0.0/16
131.236.0.0/16
149.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:0b:93:18:e0:f0:a8:f3:5a:82:4b:c9:51:73:13:19:40:43:
90:b9:62:5d:7e:c3:3e:b1:1e:cf:37:7a:c9:97:5c:09:5f:11:
5d:2a:06:ab:ab:98:ad:54:b4:5d:69:73:ea:8b:75:43:eb:9c:
e5:20:7b:a3:09:83:4d:36:df:fa:3f:19:b0:d8:2c:89:37:ad:
4c:0d:52:50:5b:b2:1d:d3:36:a3:e3:b0:05:2c:28:9f:96:63:
f4:c3:86:67:f3:4d:15:b7:6d:02:6c:ba:50:cd:3f:d0:bf:32:
1a:43:dd:16:77:d1:3b:3d:e3:11:eb:17:c3:16:11:a1:74:f0:
d8:f1:27:76:a2:41:6f:50:1b:87:fc:d0:cc:81:63:b5:5b:75:
52:e6:6c:3d:da:bc:83:17:aa:d6:6e:4b:22:c7:cd:29:f4:93:
62:2f:57:e0:e1:3d:b1:99:70:55:b0:47:ee:8b:fb:76:80:59:
ee:7c:67:7f:3c:55:32:9f:20:f7:45:f9:60:e9:bd:fc:53:4f:
3b:10:fa:05:d7:95:3f:d0:be:90:4b:44:7b:53:13:54:8f:bb:
69:aa:f9:b2:02:6d:6d:01:42:be:cf:57:75:b2:64:ab:1f:c7:
eb:22:9c:ae:1e:3a:ed:8c:fd:f3:c2:04:e3:6f:67:61:c0:b9:
b0:d5:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:41:07 2026 by rpki-client