Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.cer (raw, json)
Hash identifier: P5Zj315m6dLjorkfcVUvaN7cBOo7AsYzlUj1zHCDnW0=
Subject key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 835B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 Oct 2026 12:58:50 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 138.252.18.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33627 (0x835b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 8 12:58:50 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:a3:48:39:3f:bf:c0:04:22:fa:52:39:e8:
2a:64:dc:35:6e:bd:24:22:cd:c1:df:cf:85:2b:bc:
65:51:fc:ad:b8:53:4c:47:c2:1f:3a:16:e6:79:11:
a4:d9:1c:cf:35:e9:42:a7:1b:2d:18:dd:a7:81:f6:
02:42:7d:49:ed:9a:3b:55:1d:05:2b:48:ba:d8:e7:
a4:f7:69:7d:e2:06:53:48:01:be:9d:1f:f0:13:7a:
87:03:c5:a7:2f:7a:5a:48:fb:60:2a:8d:9e:60:7c:
49:85:24:f9:2b:84:98:62:eb:86:53:94:99:37:98:
24:11:b5:de:08:4a:36:e2:6e:5b:35:7e:46:3f:33:
c1:fa:61:03:81:30:f4:76:13:2e:74:37:aa:39:51:
82:15:70:f8:d5:47:6c:e2:cd:85:0c:3e:7b:d8:c1:
d6:5f:4a:1e:e1:e9:92:ab:6f:95:3e:6f:e6:c8:f4:
ad:a6:fa:30:e6:08:e2:c1:db:eb:8e:0f:a2:0d:de:
ad:80:3d:75:1b:ba:73:06:43:b7:7a:2c:a4:ba:7f:
9b:87:2d:93:9d:88:5b:21:34:d4:be:cf:b0:ae:e8:
b7:ea:0b:65:c0:3e:3b:66:42:a6:a4:34:c5:48:fc:
c3:78:a8:c9:40:96:2f:ac:77:14:e4:7e:c9:33:9e:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.18.0/23
Signature Algorithm: sha256WithRSAEncryption
06:0f:cd:d0:b1:9a:b7:f1:0d:4b:dc:21:a5:85:75:a1:7e:cc:
f0:b2:50:6d:f1:7a:06:f2:a0:00:de:ac:41:1f:d6:cf:04:45:
5a:f9:94:f6:0a:ab:69:3d:09:2d:f4:a8:a1:53:a4:6e:be:f5:
ad:70:a0:27:97:f1:cb:04:f3:f5:83:2e:4f:30:90:01:f0:92:
1b:d4:3a:dd:53:04:5f:a6:03:52:e5:7b:4e:0e:fb:6c:a6:49:
b4:a5:5a:55:6d:f0:38:f7:ed:ad:ff:70:fc:36:83:e2:ef:fc:
b5:59:5e:0e:6d:b9:5b:7b:fb:58:8e:7e:2c:68:f6:a8:26:0e:
39:86:36:13:e5:11:70:ca:c3:d9:20:9b:6d:5d:70:05:52:b4:
ee:ca:8b:0d:dd:ab:32:ff:54:a6:84:dc:bf:f2:d9:96:23:92:
35:13:65:ee:86:6f:62:a8:9e:53:72:f4:93:be:4d:3a:96:87:
be:5b:cd:6a:52:6b:cd:74:3c:de:e0:27:ce:d9:b8:6c:6c:58:
95:1f:ad:e7:16:17:1e:9d:83:19:ae:b9:23:a0:1b:02:62:3b:
e5:dc:e8:7d:51:0c:de:d1:c0:7e:d4:3a:b6:c1:22:ae:9e:e0:
24:9b:d6:2f:91:42:17:2e:86:1d:1f:65:5e:2e:13:1c:63:e8:
d5:28:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:28:00 2026 by rpki-client