Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer
File: srRBM3JITuPOwrPP8DCwN6v2-C4.cer (raw, json)
Hash identifier: mwkWFoltm0BkaqP573LvbOxaNXjHyX54MB0WOs9AlWY=
Subject key identifier: B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E5C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Jul 2026 08:20:56 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.72.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32348 (0x7e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 7 08:20:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91ABD41, serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:ed:4e:1c:85:11:12:a6:47:a9:81:78:c5:
14:d7:85:ad:11:dd:f0:3c:c2:85:d8:39:d3:0c:bf:
b8:54:62:7e:6e:41:1f:af:85:57:fe:59:95:9f:f7:
39:ab:14:0b:df:3b:43:02:fe:52:22:41:4e:9f:9c:
d2:67:69:d2:6a:52:71:8f:c2:e1:6f:0f:13:61:6d:
41:0d:ad:82:1f:4c:95:eb:96:c9:39:e4:24:50:6c:
2d:e3:51:2b:8d:13:0c:d6:f8:57:7e:5d:7f:60:89:
d2:07:9c:09:f0:78:5c:61:85:60:14:63:79:cb:59:
dc:90:a7:91:60:48:54:47:01:bc:1f:20:43:d3:f7:
5d:ee:8b:63:da:2e:57:dd:5d:59:07:e3:a0:9d:15:
94:ae:39:fb:2c:a7:f9:f5:1d:b7:6f:70:b5:61:d7:
b0:89:5b:3d:f5:05:3f:e1:3e:b5:2a:cd:16:f9:e5:
10:ba:e1:da:1b:d8:27:14:3c:32:ef:9b:9a:4f:13:
89:ea:4e:57:97:15:55:f7:89:eb:1e:f1:d5:31:d1:
23:69:1d:96:fc:6d:1f:c3:7f:fb:e2:8e:61:35:95:
13:ca:7e:c4:9e:0a:02:cf:5d:dc:dd:99:a7:95:51:
27:bb:e9:ff:14:f5:7f:47:0f:1c:c3:72:6e:e9:fe:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.72.0/23
Signature Algorithm: sha256WithRSAEncryption
66:17:9e:d6:70:50:3d:49:5a:73:52:e4:a7:8e:c2:ae:15:f1:
c9:62:13:01:92:d5:7e:c9:0f:17:c6:01:c2:57:1e:af:bf:90:
92:ef:2a:e5:0d:9c:75:fe:be:0e:ed:04:25:9f:85:47:27:80:
de:fb:00:6e:41:27:0f:76:f5:d8:2e:55:84:72:c4:2b:d2:39:
fd:ef:74:d4:34:88:f0:8d:e5:d4:38:61:3a:65:d4:2f:b2:fd:
66:09:61:2b:fe:7a:06:35:ec:72:4e:ee:c9:1c:97:23:81:24:
a3:b4:c2:fd:df:b4:d4:5d:03:4a:14:a9:e4:ab:3e:67:96:a6:
20:07:46:cc:54:7b:d4:cf:f4:a2:b5:e9:cb:60:25:d2:ed:fc:
a2:aa:75:53:91:7e:6e:56:4e:bd:7a:ad:b0:33:35:8f:cf:51:
c7:46:31:9e:b2:4f:43:3e:e4:3b:f0:16:fb:7a:0d:23:3a:48:
4f:8c:d0:96:b9:52:bd:aa:dd:fc:5f:61:3f:f5:65:40:d2:39:
24:f9:4c:76:91:e3:9e:45:8f:d5:aa:32:a4:08:3c:63:ef:83:
75:ac:34:8b:70:d9:84:81:80:5c:74:21:91:0e:f1:4e:98:ba:
88:a6:1c:a0:63:f1:da:9c:14:5a:1d:45:fc:fa:0e:39:5a:09:
92:2c:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:35 2026 by rpki-client