Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer
File: hKiqOolLETYwXceZBvulQzS1PeA.cer (raw, json)
Hash identifier: cXJtDbyYCALdIAoiv0PJbF3jSwteq1Um5A6ZWbwINb0=
Subject key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D15
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Jun 2026 10:43:03 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.250.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32021 (0x7d15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 16 10:43:03 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:b7:39:a5:25:4a:b9:39:6b:26:b1:c9:96:
fa:4f:da:eb:b9:f7:14:1f:bf:70:b7:a4:91:79:4b:
17:28:35:89:2b:a8:2b:65:b8:ef:70:a6:c4:49:1d:
94:4f:01:a7:c6:d4:9f:22:36:fa:e3:2c:05:71:5b:
ea:5d:2d:1d:55:bf:4d:ec:21:ee:15:19:f2:d2:2b:
3c:67:ea:9e:d7:e7:fc:10:c3:29:25:f8:43:ac:80:
17:11:ec:1e:02:9a:49:19:92:8d:f5:32:fa:7c:a9:
0d:13:6a:ec:c9:e2:6e:58:a7:f8:1a:d6:ec:fa:9b:
f7:4e:f1:53:8c:e1:41:9a:61:49:41:5e:a9:f4:82:
e0:cc:d0:94:45:72:79:7f:56:97:01:29:6c:a1:73:
96:3f:43:c6:7e:6a:b5:68:7b:5c:3d:41:e0:d0:61:
d6:91:12:ee:5d:f2:74:75:a7:5f:4c:68:cf:64:ab:
29:41:51:64:40:5f:3a:8d:a0:c2:da:8e:70:8d:18:
23:14:fb:71:87:e0:6a:2f:31:17:73:ab:4d:9b:87:
f0:27:fb:01:2d:0c:ad:b7:7b:0b:04:a3:b7:86:eb:
06:46:9a:9c:24:98:d3:c1:d7:1b:51:7e:69:a5:50:
3b:99:2b:c0:f6:7d:52:d0:98:81:19:08:d6:7a:1f:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.250.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:5f:a5:12:8e:93:8c:c5:15:7e:10:9f:de:a1:37:ec:a5:e2:
4f:e5:0e:a6:70:ad:7e:f5:44:1a:aa:06:d4:1e:b3:23:34:c1:
b9:78:72:1e:1c:56:d3:1d:f6:06:b6:bd:7e:aa:24:ca:d1:6f:
b6:19:b2:3b:e6:3d:2a:d1:9f:93:d1:e7:ac:c7:59:c0:dc:b7:
02:ff:a5:ab:72:27:15:a9:22:01:d2:5d:b8:ac:5d:68:af:ce:
27:33:89:f6:bf:d7:b9:46:b2:b1:f2:35:cf:ea:28:3e:fe:23:
f0:3f:a6:7b:99:86:f6:b6:cb:78:c5:49:89:cd:f0:76:18:33:
3c:0a:0b:6f:bd:8d:bf:08:63:20:af:11:5a:f2:b0:2f:5d:c4:
8b:30:e9:ba:ae:cc:55:be:91:0e:5e:59:ad:53:40:60:69:5c:
59:ef:87:5e:53:f4:81:18:80:21:30:7f:25:15:ba:e8:9c:88:
de:9e:0b:12:96:0e:a4:4a:5a:0e:f6:a4:af:9a:15:00:90:4a:
11:b1:97:ab:ca:3c:86:85:d3:0d:25:14:9f:62:0e:21:2b:61:
5c:d1:81:31:65:fe:42:ae:55:ac:b6:68:ea:e3:1a:b2:fb:ed:
31:1d:75:22:97:ee:ed:a3:ab:9b:31:dc:99:d7:53:fa:78:2a:
8b:ef:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:34 2026 by rpki-client