Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer (raw, json)
Hash identifier: QbgtU20UNwh18VYz4PpfDWZ2DVMFwgXKAG1bv/h6mMw=
Subject key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D64
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Jun 2026 06:14:27 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 96.30.64.0/18
IP: 146.88.32.0/19
IP: 161.82.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32100 (0x7d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 22 06:14:27 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:4c:4e:46:17:4a:1d:44:2a:64:58:bc:65:
29:cf:6d:16:c3:b3:3d:c9:fb:3c:90:ec:25:a4:b1:
c3:c8:39:7b:78:eb:40:e8:7d:a7:b4:eb:68:f9:45:
cd:df:ec:68:43:e2:f9:1b:68:c6:50:f1:63:71:78:
78:68:6c:41:d8:e8:38:2f:29:39:ca:1b:f7:07:d0:
2c:b5:c2:19:d9:45:3b:28:9b:fc:9a:af:ec:9f:de:
42:f5:5b:0e:ac:3b:8e:58:42:16:3a:81:c3:14:8e:
bc:ac:73:f4:2c:bd:b4:59:4c:d6:90:90:48:cc:21:
28:da:b6:d1:79:f4:9b:e7:db:8b:9d:33:35:91:5e:
6d:5b:79:44:82:05:8a:e6:78:8c:1e:63:cd:a1:45:
42:62:9a:01:dd:b1:08:61:68:aa:11:1b:44:1e:37:
98:6f:3a:47:ab:86:0b:24:b3:1e:66:23:ed:42:e2:
68:a0:09:43:04:65:8e:9c:58:3d:9b:d1:24:b4:c2:
de:8d:13:8a:19:ca:38:a6:e4:c9:fa:b6:e5:8c:41:
e4:22:ef:f7:88:e4:7d:85:01:60:b5:18:5f:1e:c2:
9f:fd:84:55:bc:31:ac:cb:d6:4f:05:62:61:93:60:
6c:46:1e:bc:57:5c:49:49:f1:a5:bd:bc:2c:99:6f:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.64.0/18
146.88.32.0/19
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
65:52:d9:ba:b4:bc:0d:db:78:cd:75:d0:65:85:16:ce:04:40:
19:9d:c9:ff:5b:7f:4b:cf:bf:e9:66:84:44:6e:9d:2b:25:0f:
97:d8:33:ee:94:76:c4:a2:37:98:19:d2:6a:c4:0e:23:35:7e:
75:b4:75:44:67:35:cb:48:13:4d:09:3b:2d:a2:66:9b:78:cc:
27:8c:ec:a5:55:0c:cb:7d:87:b0:65:b6:ed:65:29:82:4e:ec:
41:9c:24:9a:06:ba:e0:49:43:5b:66:5e:9f:93:8b:ca:d0:c2:
c9:76:e2:4f:4a:ed:1c:eb:37:b5:8e:fb:24:13:67:4a:a6:23:
34:3f:13:d1:03:18:ef:39:67:05:9b:51:07:7e:d9:8f:da:a4:
80:a4:1c:2e:9e:aa:e8:3f:74:77:dc:f0:05:6f:e3:35:04:83:
c6:5a:cf:22:25:5d:ab:4e:b8:24:6a:54:7e:e0:06:89:20:c8:
ba:64:0b:33:14:32:7e:21:aa:7f:07:96:b1:2f:3c:b9:75:99:
7d:31:c6:70:07:38:b1:4c:b5:4d:b5:0c:44:66:89:8f:ce:2c:
e2:c2:5b:58:f5:81:08:64:db:ad:d2:af:69:37:28:a0:4a:c6:
55:51:c8:4a:47:36:10:fc:f9:66:3d:a3:a7:a3:c4:a3:56:1a:
71:82:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:18:32 2026 by rpki-client