Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
File: i0hqzK8SpnqVaI6NEb1ljAQcElo.cer (raw, json)
Hash identifier: W8hWnyLi0oFujQbSxTon7+Fmih4+TdNwF8QPyi7xlRk=
Subject key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 837C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Oct 2026 05:08:01 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.40.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33660 (0x837c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 13 05:08:01 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f3:e5:ba:11:f7:d1:c7:14:2c:c9:db:9c:1c:
67:f2:f8:10:82:35:0f:3e:7c:08:fd:84:e4:29:5c:
04:97:ad:10:9b:8b:26:41:85:d2:9a:dc:78:2a:5f:
32:df:53:f2:da:3b:99:c3:d0:91:af:3d:3b:25:67:
2c:97:40:19:7e:ee:a8:e3:a7:16:29:9d:3a:0e:5f:
14:a1:ed:be:61:c2:1e:b4:e0:09:bc:5a:a3:ed:56:
87:13:8d:04:90:3c:26:8a:eb:36:fd:66:11:f1:3b:
d2:9b:86:c1:e4:19:8a:70:75:a0:df:41:e4:5f:e0:
0d:28:ce:03:4e:28:bf:d7:34:9d:b1:57:80:22:10:
fa:90:fb:20:29:c3:9f:e0:3e:b5:be:db:fe:43:fe:
32:93:39:19:00:87:55:08:19:e5:ff:f9:c2:9e:73:
19:29:12:dd:41:1e:0e:53:fd:26:17:6f:b8:63:ae:
c8:c4:56:42:42:26:e9:e8:75:55:ed:d2:e4:c6:c6:
95:a9:86:30:1a:2a:8f:93:94:c8:99:8f:f0:02:e5:
bc:8d:23:11:53:7c:c1:79:10:8b:92:29:70:ad:d1:
82:80:28:58:60:24:18:9b:06:79:00:51:54:f5:32:
1a:5a:67:37:e8:a6:96:d9:de:5d:d3:86:c0:e4:2d:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.40.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:3a:a5:83:93:58:dd:52:fa:e5:15:b9:18:89:f4:a3:42:5a:
3d:50:65:f4:b7:32:6b:cf:ec:1b:63:27:a1:5b:a7:ee:9d:7e:
2f:55:5d:76:af:a3:af:a8:10:d7:d1:e9:67:ab:66:bc:69:52:
81:7b:99:ab:39:60:b4:17:e8:f1:73:8a:c2:c0:ec:a7:c8:c2:
97:c3:6b:fe:ed:55:70:3b:19:0e:bb:1a:7b:d4:5d:f9:02:a1:
3a:69:ee:bc:8a:df:52:24:62:f9:f2:8e:3e:20:f4:57:d9:69:
2a:0a:8f:26:59:17:f2:71:56:fa:80:d4:58:b1:51:1d:99:45:
de:2b:4c:c3:6f:ba:bc:4f:98:dc:c2:2f:30:b2:20:1f:4a:95:
6c:38:b8:7b:9c:30:ed:bd:1f:0a:7d:59:bd:62:6b:0e:b5:21:
2a:87:cc:61:cf:d3:ef:2a:df:7b:d0:76:6d:f1:94:90:e0:bd:
df:ae:ad:18:26:cd:1e:c9:a0:3c:a4:03:a2:73:f0:46:f0:b9:
eb:34:84:b6:e9:b5:39:db:06:08:fa:ed:e4:61:bb:56:11:e5:
12:90:13:c4:93:26:47:05:ea:1e:cc:35:ea:2c:8b:23:4c:d4:
17:0b:18:57:9b:5b:03:70:42:16:14:7e:cf:eb:d4:41:1d:5d:
81:19:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:08:03 2026 by rpki-client