Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
File: nMJa0Q0U5nMm84672jnBK4x95YM.cer (raw, json)
Hash identifier: 0U9f8K/MLBcvBM756jjnEildsA+6BS/4FupacdaDC40=
Subject key identifier: 9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D00
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Jun 2026 05:26:42 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.196.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32000 (0x7d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 15 05:26:42 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91AA1F9, serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:8c:57:5d:f3:85:31:e8:b3:6e:21:47:ca:
7e:61:6c:40:0e:df:61:e9:72:47:7f:61:6d:88:48:
02:8b:4b:f8:16:c4:17:e6:af:4b:cd:88:4f:19:e5:
0c:07:12:c9:0c:6a:60:13:d0:f5:f1:8c:dc:c4:ee:
95:0d:74:bd:40:08:6e:5b:23:5a:14:70:2d:db:48:
86:87:41:c5:2e:ac:bd:4f:89:f5:a5:56:69:65:33:
1c:84:fa:06:8b:c9:c2:b9:26:15:9d:76:a0:9b:56:
6a:ca:40:12:87:7e:bd:3a:aa:2f:13:59:df:52:23:
76:f9:99:95:d3:98:5d:63:5e:9f:c9:51:4c:06:2a:
dd:b3:80:6e:cf:a6:b2:da:f2:55:a2:ef:76:d5:56:
9b:ba:d7:cd:fb:6e:29:30:24:69:9a:79:00:0b:45:
3e:21:f1:3a:9f:6e:5b:89:dc:0b:e0:cc:f1:04:c1:
b7:f5:7e:ad:6c:f8:53:79:1a:9e:15:8f:21:65:c3:
8d:53:67:5c:d4:3e:fc:25:9e:1c:60:46:61:92:a9:
fe:ea:95:96:2d:63:8c:94:c9:aa:a7:4f:87:b9:56:
0b:12:a5:0f:83:2e:67:db:d2:a3:00:a1:81:59:25:
17:4a:ec:3d:3c:77:54:62:fb:9c:6d:c8:b7:d1:5f:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:59:cf:38:ec:d5:19:c0:00:bb:51:17:f8:fa:bb:ce:f3:b3:
91:02:b6:f3:87:72:aa:3b:ac:e6:bf:79:f5:1f:c2:f9:5c:77:
d3:35:5e:5b:d5:a3:84:05:75:3f:09:8e:66:8a:66:36:94:d4:
45:e5:6b:55:0a:fb:7d:a1:79:76:2a:6f:06:00:cd:dc:1f:bc:
ef:8e:82:9a:aa:44:10:89:57:98:c7:c3:10:89:f7:14:85:f1:
2e:7d:32:3d:7a:74:be:79:03:f8:1c:10:55:39:62:35:75:3d:
5b:fe:1d:1a:0e:a0:8d:cf:51:33:4f:32:16:08:8b:86:a9:3c:
68:07:d4:81:25:e9:14:5d:05:3c:e0:03:46:49:3d:07:85:9c:
25:d6:f4:3f:b8:70:f6:c8:18:a9:3d:29:04:8d:e9:81:a2:57:
66:e4:51:e3:b3:cd:b4:2f:8f:92:f4:81:0e:da:51:ad:62:db:
66:df:f9:9e:c4:36:db:f4:37:8a:a8:23:ba:96:84:6e:7a:85:
c6:40:88:d6:db:4b:e9:95:53:8c:a9:a9:1b:90:8e:ad:3a:20:
86:c3:4a:76:ad:d8:10:58:22:11:46:c0:15:68:25:7b:dc:db:
cf:21:ab:4b:3f:61:dc:f2:f6:16:13:52:0b:7e:88:cc:28:1e:
c1:c7:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:33 2026 by rpki-client