Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
File: fj-k96AH9C3aD19Wk9dhlM42LKw.cer (raw, json)
Hash identifier: MGGC3AV/hy+8YKybNh9sVj8Xi3HwbIbK+l2yl2LEYnI=
Subject key identifier: 7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Aug 2026 04:17:06 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 192.170.86.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 14:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33017 (0x80f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 19 04:17:06 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A912FAFC, serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bb:e4:f1:28:37:dc:c5:7d:da:b5:b9:d9:1e:
89:cf:b2:b6:d9:56:ba:bf:6f:5e:f1:72:2d:43:03:
4c:44:ea:84:fa:9e:74:64:39:fc:80:b1:6f:f5:fe:
65:4d:f9:0a:6e:ea:51:57:17:40:7d:d4:75:52:7e:
65:80:35:c4:16:92:ed:9d:cf:bd:52:7e:ea:29:a1:
6a:fb:03:c2:b6:2d:e6:34:79:d6:19:9e:0e:04:c4:
59:04:4a:81:d8:16:e6:00:9d:e3:86:76:cf:e1:4d:
11:c6:43:aa:e6:ae:21:44:1e:07:04:8c:d2:ad:e0:
11:df:34:e2:7a:b2:57:1e:b7:5b:22:59:61:29:ef:
8c:8f:6e:0a:79:e1:b6:a3:90:59:b9:f4:24:b0:0b:
0b:21:81:23:7f:d1:86:e5:19:56:98:6c:b3:99:d7:
bb:a9:0f:89:6c:aa:c0:3d:bc:0f:46:fe:55:00:5a:
e1:87:5e:82:26:06:2c:23:f5:d7:ee:17:e5:ae:76:
1b:bf:96:c6:52:2a:e2:d9:6a:b3:6e:e7:7f:5d:09:
78:20:60:53:e9:e2:a2:4a:3d:15:72:09:ee:b6:96:
a4:b4:e2:8d:6f:7d:b0:58:70:94:6c:69:3f:e2:5b:
db:87:1d:ad:65:ad:80:54:ae:57:fe:dd:ad:e1:8b:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.170.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7a:ae:17:4a:73:69:66:e5:5f:98:ca:84:7e:be:bd:70:88:
5e:1d:b6:51:46:8f:3c:80:ff:ca:a5:b0:f9:9c:68:93:d8:da:
e3:39:91:97:c1:ae:7e:7e:9c:b0:80:f6:13:d8:02:c6:33:47:
ff:6f:f3:33:e7:73:a3:a8:62:74:ee:11:3e:d6:5a:c9:fb:c4:
68:fe:10:b1:b1:22:c6:3e:e1:86:40:96:70:71:61:01:8c:59:
7e:11:17:89:d1:f8:99:ff:a3:d3:6a:e1:e1:71:e4:b6:fa:8a:
f4:d1:aa:9e:89:45:a8:80:e3:dc:fb:3c:11:c0:10:b6:93:39:
c8:af:3b:c2:cb:ae:eb:6a:8e:e6:a3:af:60:25:e4:1f:b4:c1:
48:58:c5:f1:51:bb:49:f7:49:c9:c8:54:62:5f:ab:54:f4:13:
d5:c7:49:ce:ae:bf:e3:26:d6:5d:d9:45:03:61:24:c6:71:3f:
ae:86:62:fa:5b:bf:99:fe:a1:a7:25:c4:b0:bb:cd:4c:5f:7d:
96:9b:be:e6:a0:00:1a:16:d6:e7:fb:ea:06:2a:77:20:d9:05:
f0:e4:ed:43:66:07:3d:b8:dd:c5:07:a8:3a:52:5e:b8:f3:b4:
2a:23:2f:9d:c9:98:78:c0:b6:97:f3:7e:53:9f:be:55:e2:46:
c8:6f:de:7f
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAID5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgxOTA0MTcwNloXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkZBRkMxMTAvBgNVBAUTKDdFM0ZBNEY3QTAwN0Y0MkREQTBGNUY1
NjkzRDc2MTk0Q0UzNjJDQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCFu+TxKDfcxX3atbnZHonPsrbZVrq/b17xci1DA0xE6oT6nnRkOfyAsW/1/mVN
+Qpu6lFXF0B91HVSfmWANcQWku2dz71SfuopoWr7A8K2LeY0edYZng4ExFkESoHY
FuYAneOGds/hTRHGQ6rmriFEHgcEjNKt4BHfNOJ6slcet1siWWEp74yPbgp54baj
kFm59CSwCwshgSN/0YblGVaYbLOZ17upD4lsqsA9vA9G/lUAWuGHXoImBiwj9dfu
F+Wudhu/lsZSKuLZarNu539dCXggYFPp4qJKPRVyCe62lqS04o1vfbBYcJRsaT/i
W9uHHa1lrYBUrlf+3a3hixA9AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUfj+k96AH
9C3aD19Wk9dhlM42LKwwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJGQUZDL0QzQUFGNzhBOUI4NDExRjFCOTNERkQ1ODQ0MTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRkFGQy9EM0FBRjc4QTlCODQxMUYxQjkzREZENTg0NDExRjk3MC9mai1rOTZB
SDlDM2FEMTlXazlkaGxNNDJMS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADAqlYwDQYJKoZIhvcNAQELBQADggEBAD16rhdKc2lm5V+YyoR+
vr1wiF4dtlFGjzyA/8qlsPmcaJPY2uM5kZfBrn5+nLCA9hPYAsYzR/9v8zPnc6Oo
YnTuET7WWsn7xGj+ELGxIsY+4YZAlnBxYQGMWX4RF4nR+Jn/o9Nq4eFx5Lb6ivTR
qp6JRaiA49z7PBHAELaTOcivO8LLrutqjuajr2Al5B+0wUhYxfFRu0n3ScnIVGJf
q1T0E9XHSc6uv+Mm1l3ZRQNhJMZxP66GYvpbv5n+oaclxLC7zUxffZabvuagABoW
1uf76gYqdyDZBfDk7UNmBz243cUHqDpSXrjztCojL53JmHjAtpfzflOfvlXiRshv
3n8=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:47 2026 by rpki-client