
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m4vSH42SvhZeLPvBgXwhsqXLTj0.cer
File: m4vSH42SvhZeLPvBgXwhsqXLTj0.cer (raw, json)
Hash identifier: p4yI9AkOepusib0amzwbijP7jsnHjegxly/N9jpinIw=
Subject key identifier: 9B:8B:D2:1F:8D:92:BE:16:5E:2C:FB:C1:81:7C:21:B2:A5:CB:4E:3D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7CF9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 14 Jun 2026 08:18:48 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.232.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31993 (0x7cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 14 08:18:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9182C55, serialNumber=9B8BD21F8D92BE165E2CFBC1817C21B2A5CB4E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:41:1f:75:f2:ff:b5:a7:f6:e5:e3:5c:0d:
92:29:f5:84:7c:4d:9f:8f:68:e1:1a:8e:c5:00:a1:
c2:53:ee:0e:c5:51:c5:dc:c5:7b:9a:8e:6e:8c:77:
6a:d8:a5:17:56:6d:f2:b2:97:48:ad:5b:8b:a1:19:
70:eb:62:df:ef:63:82:63:39:85:23:38:f7:6f:6a:
fb:98:97:53:8c:3f:a2:ec:d0:a4:f8:a2:59:d1:35:
1e:1a:01:1b:3d:ec:1f:59:fc:3b:3f:1a:dd:9c:3e:
d3:c4:5e:59:e8:fd:e1:c1:c8:00:60:a0:c3:7c:c8:
a8:0d:2f:fc:8e:7e:50:10:ae:73:14:04:a2:d7:85:
5f:88:23:6f:6c:45:53:00:d1:f0:58:b0:88:a5:d9:
7d:09:98:17:86:51:66:d3:3b:de:0d:8f:48:60:6e:
ba:33:b6:c6:46:40:4b:b0:82:b5:89:a9:5b:32:9a:
fe:87:d6:49:0c:ec:c3:0a:d7:9d:f6:b2:37:71:2d:
fa:bf:6e:5b:db:bf:72:c4:32:3f:74:77:98:8a:0f:
38:8a:ac:8a:a9:79:69:e8:e4:88:dc:55:88:ac:99:
4a:ac:d5:0b:0a:9d:7e:1d:76:22:3a:8f:4c:9c:02:
39:1f:aa:ca:3c:36:7a:77:03:71:77:2d:73:42:e8:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:D2:1F:8D:92:BE:16:5E:2C:FB:C1:81:7C:21:B2:A5:CB:4E:3D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.232.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8e:71:17:72:12:aa:28:24:ee:df:f3:83:47:e3:b6:13:b5:
3b:8f:a4:ab:18:93:79:56:df:56:b7:dc:cc:1b:73:4b:31:fb:
a9:28:61:c3:d5:0a:c1:58:a4:a6:1e:4c:64:e6:16:2d:06:31:
96:12:a8:18:7b:29:f3:a7:aa:a6:b1:ab:68:92:84:50:57:de:
c9:36:d2:70:9d:f2:ca:2f:f3:07:19:8b:1d:bf:4d:fe:61:87:
c2:3d:09:5d:28:2e:0a:0b:53:62:af:45:38:0c:ca:d2:b7:cf:
48:c9:9f:40:7e:76:99:f6:f4:25:c4:4a:2a:6e:61:4a:04:ac:
fe:ab:42:e3:26:f7:fd:c3:0a:2d:21:19:07:0a:5a:f3:5e:23:
02:31:83:6e:83:48:76:fe:90:ec:e0:e0:2f:9b:c0:1c:58:7a:
a7:a8:b4:37:5b:e6:49:ca:ac:45:ae:c8:4e:e1:43:55:76:d9:
98:eb:39:88:cd:e1:f3:99:c8:49:35:81:d8:3f:5f:2a:6b:cd:
7e:66:25:07:e5:3f:81:30:51:b7:5d:82:d2:06:fa:93:d3:ff:
9c:2c:81:82:05:7e:ef:40:76:a4:12:b3:90:42:1a:29:13:2f:
dc:8a:3f:26:20:3d:09:c2:cd:6d:e7:19:f7:1d:34:c2:c5:16:
1a:a0:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:34 2026 by rpki-client