Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer (raw, json)
Hash identifier: kqotB89HpsonflfvBXDrKiT2S02zT2h7gnXyTDbwxmY=
Subject key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7FDA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Jul 2026 15:09:24 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.20.142.0/24
IP: 160.22.155.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32730 (0x7fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 31 15:09:24 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:1f:63:64:9f:ba:ed:3f:d7:67:5b:51:5e:
a1:74:f5:60:3b:85:ea:80:e7:83:c8:2c:ec:a6:a2:
1d:07:0b:df:40:3b:94:b6:da:5f:a4:6e:dd:e9:54:
91:64:a8:15:c7:a6:13:5c:08:a6:35:24:21:b5:47:
05:9b:c4:ea:ba:7a:ec:4f:34:29:fc:a7:26:fa:a4:
a1:93:ac:a1:35:62:d4:7d:39:9d:42:79:50:5a:9a:
cd:17:6e:56:81:20:64:48:1b:4b:a2:15:5f:a7:46:
ce:9a:25:c4:68:34:40:86:da:c3:c2:a7:cd:ff:5a:
05:8b:95:f8:a0:73:13:ec:ab:b8:80:2b:df:02:fb:
7a:31:2e:6a:ba:31:db:45:cd:b0:72:43:23:99:ed:
78:b2:e4:74:61:9c:1f:f7:d1:9d:78:03:89:88:95:
96:72:27:3b:93:4b:ff:49:43:07:95:09:bf:ed:a4:
f5:d0:2d:70:f2:a3:82:7a:f2:34:ea:16:46:75:20:
00:cd:da:ab:53:59:ac:ff:7d:a0:7f:30:df:89:8c:
dc:57:08:02:4d:01:f2:37:0d:85:d4:68:1e:d1:b1:
9d:02:06:cc:d0:00:6b:08:49:02:a1:3b:b5:1b:49:
4f:12:6f:f6:88:95:3d:8f:87:3d:46:e5:0f:54:8e:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.142.0/24
160.22.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e8:cd:c9:b1:db:c4:35:f0:63:33:be:c1:0d:0e:4e:19:d9:
1e:a2:c2:d6:be:73:a5:ea:4b:4a:21:cc:81:72:e1:f7:49:80:
34:c8:c3:d4:45:d0:b0:df:c7:72:48:e6:2e:3c:57:a1:ae:87:
2b:3c:f7:f5:be:38:a4:28:11:02:17:23:e0:50:95:25:30:40:
36:91:54:a2:11:42:68:a7:25:ff:28:e0:40:7f:f3:51:fa:26:
2d:ef:02:3b:d1:bf:59:49:ce:e1:db:6d:f8:57:c2:35:e4:f8:
93:b3:25:13:08:ae:22:5e:01:f4:3d:52:a6:08:54:48:1c:81:
b4:33:e7:a1:09:20:a6:74:5a:2a:66:76:ed:1a:01:ce:51:98:
46:ad:ae:01:a3:f1:36:bd:67:bc:27:44:bc:f3:11:fb:08:cf:
ac:12:ae:60:28:9d:46:b9:a3:b2:11:69:85:a6:2d:41:3a:aa:
30:04:d7:a8:ff:21:4b:06:06:b4:d0:32:8a:4f:95:95:c1:a6:
f9:3c:21:50:3a:80:cf:70:73:c2:d0:c9:80:27:48:c8:e9:25:
6c:44:02:84:92:f4:f2:ee:86:04:9b:c2:d6:5f:a6:dd:e3:64:
32:6b:4a:fd:fb:7a:f5:31:50:72:66:cd:66:63:69:26:e9:b2:
34:8b:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:57:48 2026 by rpki-client