Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
File: jKszW_vzkiyQjyAPyLk4vIHMkwI.cer (raw, json)
Hash identifier: QLZI8s7lx31/3Fpcpf1WzZPS//c8ftm07JD+qMzu9Ik=
Subject key identifier: 8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C1C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 May 2026 13:31:01 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 157.85.128.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31772 (0x7c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 29 13:31:01 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91F8AD4, serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:f6:db:ce:2e:5f:f4:de:b2:3a:db:da:b3:
0c:b1:ad:76:55:e4:60:65:54:68:95:98:f0:2a:3c:
5e:57:c6:bc:f9:fd:68:24:95:20:58:9f:d0:fa:ca:
05:08:b7:d5:2c:1f:38:c5:f9:03:4d:74:7d:07:19:
9d:0a:21:80:1d:e0:31:de:09:08:4f:bf:45:dd:7e:
49:c8:db:73:19:9b:aa:bc:12:0b:74:33:1f:8a:de:
bc:08:b4:bb:28:6f:e2:95:0a:5c:47:be:21:fd:a7:
a9:99:e7:80:e3:09:aa:13:4c:ba:45:be:2c:29:c0:
ec:d6:96:45:22:c3:b3:a2:74:af:54:b0:99:c9:f2:
c5:24:85:10:fa:29:93:65:01:da:5a:48:e2:97:28:
5c:ea:90:e4:00:fa:76:da:59:8b:68:ee:a7:b7:ba:
a1:aa:63:cd:d9:86:63:da:4b:06:82:c7:c2:96:af:
7c:c9:0a:a3:31:aa:6b:2a:e3:b3:98:f6:73:bb:7b:
98:2d:3f:6c:b7:9c:7e:32:7d:d5:ea:86:93:1b:93:
d9:8b:03:46:62:8f:e8:e0:93:c7:6a:7b:45:d5:2d:
66:76:2d:b1:65:91:64:1d:9d:5e:69:bd:8e:98:63:
a3:c4:a8:71:55:71:d6:ef:a9:0d:d6:3a:db:23:a1:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.85.128.0/18
Signature Algorithm: sha256WithRSAEncryption
85:ed:61:f2:99:a4:c1:ba:d3:bc:18:33:c9:17:23:c3:f5:22:
5e:90:69:84:23:28:71:a0:0a:0e:0b:95:f9:a3:1a:5a:a3:d9:
45:6b:6b:ef:25:7c:50:d4:c3:d0:ff:6e:61:27:ba:e5:14:2d:
d0:59:9c:9b:90:10:0c:00:8f:a9:a6:85:09:e5:4f:a5:84:f0:
d5:1e:22:27:d7:6e:d4:86:86:30:b6:36:48:96:e7:cc:11:59:
a4:97:81:76:3c:1b:4c:54:7b:3f:2b:38:74:cc:81:7f:a5:c2:
90:40:51:dd:00:40:6b:81:fb:20:67:7c:ab:39:f4:4e:63:5e:
b0:7b:65:7a:b1:13:7f:f5:ef:99:12:c7:0b:d0:74:65:77:17:
bf:48:3a:14:62:8a:04:40:79:27:dc:64:89:90:8e:a7:54:0f:
08:42:18:e6:ec:cd:18:44:4e:90:98:37:7b:76:19:40:17:0d:
08:1a:06:f3:ef:bf:87:c9:96:c8:60:d3:4d:21:c0:07:0b:3c:
db:c7:4b:51:df:c6:5b:b2:1f:a3:17:84:43:e8:83:60:c7:39:
e6:fc:cd:55:ef:a3:be:a4:2f:e0:c3:3b:d6:8a:0b:d2:ff:ee:
a7:eb:a0:fb:93:18:c6:5a:bd:41:f4:3b:c3:4d:78:b0:ac:d9:
c8:b1:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:38 2026 by rpki-client