Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer (raw, json)
Hash identifier: fbB9grqN0TPl7ZGuJYeOsJgnIdV5z4Z3a4gvvOhabK8=
Subject key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7DC5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Jun 2026 14:52:17 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 138.44.0.0/16
IP: 160.250.178.0/23
IP: 192.203.235.0/24
IP: 192.207.33.0/24
IP: 192.207.113.0/24
IP: 192.207.161.0/24
IP: 192.231.212.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 18:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32197 (0x7dc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 29 14:52:17 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:7e:70:cf:52:79:fd:fe:dc:f9:de:77:90:
8f:d5:00:9c:91:c5:fc:34:40:66:84:35:f2:bd:15:
f8:a4:00:a7:2d:46:3e:bc:60:ed:6d:45:c7:69:65:
0b:4c:89:f3:e3:83:50:69:17:b3:62:e7:bd:ce:c2:
3c:a3:77:db:d3:b4:24:38:7c:1c:a6:08:17:d1:aa:
33:62:b0:8b:9f:2c:74:65:fb:c0:d3:ee:11:13:74:
19:ce:05:a1:43:8d:01:f9:52:07:74:e3:8f:80:e0:
77:01:72:28:05:26:12:21:9a:df:c5:28:d8:01:96:
99:cc:c3:e4:80:2f:42:ba:83:d0:bb:61:51:83:b6:
5f:62:6d:67:21:da:26:19:e5:bb:74:c1:7c:97:79:
e6:72:e6:e3:64:b2:3c:09:3b:50:29:27:1e:44:4a:
b4:ae:b8:83:de:8a:f6:db:d0:4d:1d:cc:44:ab:89:
99:99:5d:be:0c:2c:16:27:9b:14:ae:a1:53:a5:96:
d5:23:a3:86:8e:5d:2e:4c:79:c0:47:46:4b:53:26:
63:25:2a:25:d8:b9:2b:af:ca:e1:3e:3f:73:e6:a2:
6f:f2:87:80:08:4f:6b:f4:05:6f:4d:f7:f8:17:07:
50:0c:f9:e7:ba:16:98:5f:1a:1a:e8:4e:68:da:23:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.44.0.0/16
160.250.178.0/23
192.203.235.0/24
192.207.33.0/24
192.207.113.0/24
192.207.161.0/24
192.231.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6b:f5:b8:61:e9:75:f2:ec:bf:fb:7c:b9:27:3e:aa:3f:08:
04:43:e7:7d:0a:a0:31:2b:9d:5d:b6:37:0e:4c:b7:37:6b:63:
c9:f5:fe:8b:dc:a8:a0:3e:f7:ad:98:90:5d:b1:a2:97:8d:d4:
1d:c5:a0:fd:2f:b9:87:c1:f0:5b:1b:3b:b2:c7:29:49:06:8a:
5b:10:d9:96:10:ac:78:f1:4b:62:5f:c4:b9:14:2e:1d:75:14:
47:42:42:19:78:99:3a:58:6c:7c:6e:69:97:17:5b:03:75:38:
4d:cd:11:6c:78:97:94:fd:63:65:de:3d:6f:27:e4:ae:6e:d8:
38:ea:b3:e8:11:4f:a6:3a:f9:fc:d3:a7:44:b1:a0:86:c4:ff:
6e:12:94:70:f2:cb:bb:f3:4f:ce:4e:8b:1b:51:df:4f:97:14:
88:1c:eb:e2:74:73:2d:ff:a3:f1:85:62:ed:de:fa:3b:70:f2:
d0:90:0b:cc:81:aa:c6:14:97:7e:e7:84:c9:14:66:48:ca:4f:
02:ab:c3:62:37:39:83:f9:dc:6f:81:a0:06:52:29:bc:2f:05:
b3:f3:28:c7:8d:a9:5f:96:bd:48:3f:70:86:b0:4c:c1:00:a5:
75:f1:80:2d:ad:c9:33:26:da:36:d3:20:ca:81:69:0f:96:1c:
99:bf:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:19:39 2026 by rpki-client