Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
File: ex-xujsOyMpeXBOuvPxuuo0g6qc.cer (raw, json)
Hash identifier: H8nyYSdO4tXlSql3lyBHM6PBO9HEouvH1s98Lr+Q6XQ=
Subject key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 83A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Oct 2026 01:32:12 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.20.42.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 08:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33705 (0x83a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 19 01:32:12 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:6c:e5:f1:4d:39:50:c0:11:6b:1b:3e:bb:
a0:43:4b:3f:cc:2b:a7:f5:dc:04:8e:fa:ee:14:55:
9f:44:d8:6a:45:e9:dd:bd:05:6d:84:83:72:c0:83:
95:02:12:20:32:45:85:3f:7b:47:ce:28:ad:88:ec:
83:0f:3d:c0:8e:70:5b:cf:62:56:4f:24:bf:46:dd:
8a:51:2d:8e:52:68:fe:28:70:65:39:b4:97:ba:7f:
2e:91:b1:c3:ca:24:d5:33:89:5f:fc:2b:7a:a0:36:
97:9d:05:9a:89:f1:44:80:2b:b5:13:ca:11:57:48:
9b:e7:30:5b:40:26:9d:e8:e7:f9:2f:b8:54:83:07:
a3:79:b3:51:59:8f:6c:e8:f8:da:77:c1:14:33:4b:
c9:ad:c8:02:8b:26:d6:d7:e4:8f:b0:09:d5:80:c3:
9e:43:bc:bc:78:e8:fd:bb:7b:2a:3d:14:78:bc:b0:
56:65:33:b2:5d:7f:c3:e2:90:d2:7f:e4:51:3c:df:
f3:00:f6:a0:d5:f5:a4:2e:8a:1a:c3:52:01:eb:ea:
0d:77:2b:4f:91:6a:5a:11:53:c7:44:c7:8f:9d:55:
b6:f2:72:d9:92:c8:cd:c3:75:16:be:08:a6:a5:f9:
01:c5:5d:e3:5d:f8:2c:d2:6f:83:c1:5d:fc:ea:47:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.42.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:f3:07:a4:94:86:98:9a:0a:d3:58:0a:63:f1:f2:1d:a6:a4:
a9:4d:ee:26:fd:79:f9:56:7d:5b:59:63:6f:f4:c5:53:41:91:
d9:1b:82:5b:a0:ae:5b:ef:44:82:ea:b8:49:c5:84:42:37:61:
4d:f6:84:88:0b:8e:3d:77:3d:b3:48:7c:b0:71:a2:40:47:43:
41:8e:bb:e7:d4:f2:e0:d0:c3:94:c4:19:04:c8:5a:06:b9:a6:
31:e0:03:6e:72:17:71:76:fe:00:80:03:5b:90:07:36:3a:fd:
0b:7a:40:7c:fd:21:20:b2:5c:20:4b:02:79:38:d1:49:94:68:
57:fe:08:3b:0c:29:74:78:a3:b4:08:03:af:8b:18:38:e0:72:
8c:99:f4:a2:e8:78:79:b5:80:1b:c4:a7:a4:30:d2:ef:68:fb:
af:74:00:b1:f1:77:a2:e7:4a:51:40:45:e3:ad:54:69:66:83:
ca:2d:14:13:5d:94:1c:1d:4b:d7:c9:67:52:80:48:e6:6a:e4:
a9:6a:3d:ab:91:e9:75:ae:03:72:16:66:56:77:2b:48:65:8b:
0a:e1:16:1a:46:8f:66:18:90:9f:4e:ef:76:0a:76:07:6b:49:
49:3f:86:e1:ed:a5:0f:1f:77:7f:d1:17:df:0d:9f:40:f3:ba:
6e:f8:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:26:59 2026 by rpki-client