Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ojnN7_dPIz48Qo4CDpx5vds1KSg.cer
File: ojnN7_dPIz48Qo4CDpx5vds1KSg.cer (raw, json)
Hash identifier: 6RAzfphbT0rwXTQzfynFslHiKaOXlhvvcSMwLCzUhEY=
Subject key identifier: A2:39:CD:EF:F7:4F:23:3E:3C:42:8E:02:0E:9C:79:BD:DB:35:29:28
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 809D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Aug 2026 05:00:25 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.247.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32925 (0x809d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 12 05:00:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91E4704, serialNumber=A239CDEFF74F233E3C428E020E9C79BDDB352928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:48:6d:eb:68:fc:fc:55:61:34:b8:ed:30:
ef:93:f5:f3:87:b9:48:19:1c:88:fb:78:86:a9:2b:
6c:7e:79:5e:e7:24:e4:48:4d:75:4a:5d:03:10:a5:
28:82:d3:4a:85:55:1d:20:49:a7:f0:7a:13:d8:4b:
e3:11:8c:c2:ef:ca:87:26:cc:6c:c0:08:53:d0:81:
78:59:95:2a:3c:59:b9:97:05:c0:da:83:7b:c7:b4:
54:e5:a4:c0:e5:22:ec:19:da:52:bb:00:b3:e5:01:
87:44:d6:0e:a1:57:e0:40:c2:0e:58:57:fa:85:55:
6e:2f:5b:8b:08:e8:02:51:ba:79:5f:d8:eb:72:26:
f3:15:6b:6e:14:4a:d3:5f:88:ac:85:fa:96:2c:20:
21:e8:33:09:0a:87:bb:5e:4b:db:83:73:46:18:48:
8a:53:0a:14:3c:5e:40:9f:61:cf:c1:43:86:bc:45:
96:a5:76:0e:f6:34:be:55:2d:27:3e:47:35:64:8f:
d3:35:bc:57:53:20:29:c7:7d:d9:06:f3:e5:97:29:
67:a7:0f:ce:b7:a9:6d:53:1e:73:e4:b3:af:cd:dc:
52:6c:cc:e3:b9:bb:fe:dc:9f:64:2f:d5:31:d8:01:
6f:b8:53:00:e0:26:36:f4:a6:19:a3:7e:f8:f6:79:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:CD:EF:F7:4F:23:3E:3C:42:8E:02:0E:9C:79:BD:DB:35:29:28
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c6:02:f5:5b:70:c5:05:d4:e3:f2:73:49:a9:80:10:88:6c:
1c:05:8e:b4:7c:44:48:e1:81:70:70:c6:f6:0e:6c:8d:f9:68:
c9:16:c2:85:32:d5:d0:7a:92:42:b2:92:19:78:59:90:01:93:
97:4e:3f:09:6f:d0:b7:98:00:0e:6e:95:15:54:d4:8b:96:e6:
f3:c5:41:31:3a:4f:44:db:27:35:e5:bd:4d:61:b5:de:06:3d:
67:ba:bd:46:42:7c:aa:fc:38:80:65:57:f9:b5:3c:d5:4f:58:
26:20:5f:6e:48:76:ea:35:9c:96:72:0c:e8:3a:6d:60:c5:22:
be:e5:b5:1e:24:7e:f9:e5:1c:94:a3:66:84:59:b6:6a:82:1f:
9d:65:e9:5d:6d:12:cb:b1:a4:0b:47:57:49:63:45:21:bb:2f:
39:74:41:24:0b:5b:9c:42:ae:10:96:a5:06:39:0d:fb:7b:84:
90:df:7b:e9:8d:1f:44:4d:43:df:3d:05:75:54:de:50:8c:f9:
45:b2:51:5f:e6:59:ad:62:73:8f:3a:92:cb:c8:8c:30:1d:df:
04:61:e7:b0:e2:84:1d:c1:53:a9:93:5b:2c:15:c2:e9:d9:a7:
9a:a0:d3:2e:20:c7:ff:97:96:fd:09:e9:47:64:0e:ec:74:cd:
89:71:e4:cf
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAICdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgxMjA1MDAyNVoXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTQ3MDQxMTAvBgNVBAUTKEEyMzlDREVGRjc0RjIzM0UzQzQyOEUw
MjBFOUM3OUJEREIzNTI5MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbIEht62j8/FVhNLjtMO+T9fOHuUgZHIj7eIapK2x+eV7nJORITXVKXQMQpSiC
00qFVR0gSafwehPYS+MRjMLvyocmzGzACFPQgXhZlSo8WbmXBcDag3vHtFTlpMDl
IuwZ2lK7ALPlAYdE1g6hV+BAwg5YV/qFVW4vW4sI6AJRunlf2OtyJvMVa24UStNf
iKyF+pYsICHoMwkKh7teS9uDc0YYSIpTChQ8XkCfYc/BQ4a8RZaldg72NL5VLSc+
RzVkj9M1vFdTICnHfdkG8+WXKWenD863qW1THnPks6/N3FJszOO5u/7cn2Qv1THY
AW+4UwDgJjb0phmjfvj2ecbjAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUojnN7/dP
Iz48Qo4CDpx5vds1KSgwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU0NzA0L0I4REE0RjdBOTYwQTExRjFBQTBBNEUzMTVBMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFNDcwNC9COERBNEY3QTk2MEExMUYxQUEwQTRFMzE1QTExRjk3MC9vam5ON19k
UEl6NDhRbzRDRHB4NXZkczFLU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACg7PcwDQYJKoZIhvcNAQELBQADggEBAHzGAvVbcMUF1OPyc0mp
gBCIbBwFjrR8REjhgXBwxvYObI35aMkWwoUy1dB6kkKykhl4WZABk5dOPwlv0LeY
AA5ulRVU1IuW5vPFQTE6T0TbJzXlvU1htd4GPWe6vUZCfKr8OIBlV/m1PNVPWCYg
X25Iduo1nJZyDOg6bWDFIr7ltR4kfvnlHJSjZoRZtmqCH51l6V1tEsuxpAtHV0lj
RSG7Lzl0QSQLW5xCrhCWpQY5Dft7hJDfe+mNH0RNQ989BXVU3lCM+UWyUV/mWa1i
c486ksvIjDAd3wRh57DihB3BU6mTWywVwunZp5qg0y4gx/+Xlv0J6UdkDux0zYlx
5M8=
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:12 2026 by rpki-client