Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
File: k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer (raw, json)
Hash identifier: Z9YgBO/ZYuxW/w9PzBn4UERzEAxIL2/dXi4gBym/pSo=
Subject key identifier: 93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Jun 2026 22:58:19 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 168.151.232.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32056 (0x7d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 17 22:58:19 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A912A3C4, serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:5e:b6:3e:65:6b:d7:81:90:1c:26:d8:5a:
5e:5b:d8:c5:e7:10:86:69:fb:6e:aa:4a:50:73:16:
f1:f0:3b:75:59:84:66:17:5c:ee:54:de:4a:00:5b:
b2:db:7e:6a:22:47:8b:a8:fa:79:ac:3a:d8:b7:4f:
51:39:c0:04:ca:37:b6:52:19:af:46:eb:bf:b4:75:
10:44:36:c9:d2:63:6c:c2:6f:17:30:52:4a:aa:5d:
ff:4c:37:2b:04:4e:0e:fb:84:af:26:39:87:f8:a8:
c6:0a:a5:14:b0:c2:51:b2:e5:44:83:d5:d7:52:3a:
4d:7a:f8:84:12:96:5c:1e:7e:00:34:8c:ac:6c:74:
fd:93:b3:11:84:f0:f9:a5:19:30:fd:d8:d6:15:10:
4a:e5:87:ca:66:f5:fc:8c:da:a2:5b:9e:b9:e7:2e:
14:ba:c4:5d:47:39:b2:46:b0:94:19:74:33:41:46:
7e:53:5d:85:a1:4a:f5:05:76:91:bb:73:95:be:9d:
0e:82:66:ff:95:3d:7b:e2:f6:bf:cd:2c:de:84:50:
4c:0d:8b:f6:4e:ea:75:eb:3a:c3:d8:14:88:06:ec:
f6:18:a5:5c:65:52:ce:3c:67:8c:d7:8d:31:c3:60:
09:dc:bf:dd:e5:e3:dd:c8:ad:74:a8:e3:58:b1:3e:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.151.232.0/21
Signature Algorithm: sha256WithRSAEncryption
61:cb:c8:95:16:90:c9:8e:a3:d1:8c:93:70:50:91:db:ba:2b:
6a:89:2f:6f:b1:6b:fb:ef:06:ec:19:7c:85:90:0e:b4:c5:85:
16:b8:23:1d:e7:06:01:81:ea:47:e8:7c:0c:54:00:50:8e:10:
31:28:04:c2:30:7a:3c:b5:a1:a7:d6:a0:d8:34:9e:b3:85:07:
b6:8b:19:11:33:60:77:be:66:1a:bf:fa:2a:24:c1:7c:80:17:
95:75:e6:a0:9c:01:a6:4b:9a:bd:21:ed:92:ae:b7:7f:fa:a5:
e2:c3:b4:52:85:54:55:b2:62:56:88:97:f8:17:90:bd:bb:64:
65:07:c0:83:c6:9c:e1:cf:17:9c:63:17:24:9d:e3:88:56:6b:
fe:39:30:88:8b:2f:3d:5a:cb:4e:96:70:10:25:ca:2c:ed:27:
51:22:fa:5c:1b:6a:20:52:51:35:13:bf:61:77:c6:54:0c:e6:
5b:95:85:ff:d8:3d:3d:30:43:41:8e:49:39:cd:34:1c:97:7d:
cf:37:c0:41:c4:f3:1b:39:59:c0:07:7c:ea:78:92:90:0f:99:
b1:87:0c:63:0f:38:31:05:c7:63:fa:1c:6f:81:cc:05:46:66:
71:55:ab:39:2c:7d:b2:91:93:4d:f4:cb:32:59:f1:77:0b:6a:
54:8a:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:32 2026 by rpki-client