Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zrTFr0tpl_vsS9nakfjD8L7xtF4.cer
File: zrTFr0tpl_vsS9nakfjD8L7xtF4.cer (raw, json)
Hash identifier: zdx5wPN7y42NtJvn8jrAsKvcEWnqGEA8CKNQ8QylcB8=
Subject key identifier: CE:B4:C5:AF:4B:69:97:FB:EC:4B:D9:DA:91:F8:C3:F0:BE:F1:B4:5E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 830E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6827/A243A5A6BD8611F18BED64536D11F970/zrTFr0tpl_vsS9nakfjD8L7xtF4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6827/A243A5A6BD8611F18BED64536D11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 10:55:40 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 192.86.133.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33550 (0x830e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 10:55:40 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91A6827, serialNumber=CEB4C5AF4B6997FBEC4BD9DA91F8C3F0BEF1B45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:80:89:ac:90:5a:b5:63:7c:16:d1:7b:65:
5c:f1:61:26:62:a2:42:bf:4a:df:28:ce:f5:98:31:
82:f2:0f:1a:63:2b:7d:d2:86:37:0e:f4:f3:35:09:
22:91:59:03:f2:a4:24:da:f7:95:1c:60:7a:00:5c:
a7:a8:8e:84:b4:f5:f3:e2:3c:c0:ce:04:eb:26:42:
c6:0f:44:0f:f0:21:02:23:f3:0e:ab:d3:8a:c7:79:
e1:11:4c:a6:c0:24:6f:f2:1f:ce:2f:44:5b:a7:4e:
47:4b:93:65:2d:5c:3d:45:d2:52:14:03:f5:25:95:
7c:4c:2a:d3:2f:5b:f2:68:a4:39:40:9b:e9:9b:3d:
6f:a3:ef:4f:88:1e:82:ba:45:92:18:17:c4:0e:c1:
bb:cf:b6:99:44:1c:5c:d4:cd:0c:b4:92:79:46:4b:
24:da:45:00:29:91:85:4d:0f:07:77:b0:15:c3:37:
b5:dc:12:19:8b:b7:2c:4c:af:77:18:fb:ca:64:46:
b1:79:95:e8:c4:b9:fa:a1:c9:5b:b1:ba:10:e8:de:
58:6b:da:1d:b6:6f:f1:bc:6c:ba:68:5e:30:44:f4:
1b:f9:4d:57:6b:75:bf:be:b4:f7:96:b7:71:34:80:
1b:69:27:49:af:0e:bd:dc:10:8e:84:ad:93:b1:0f:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B4:C5:AF:4B:69:97:FB:EC:4B:D9:DA:91:F8:C3:F0:BE:F1:B4:5E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6827/A243A5A6BD8611F18BED64536D11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6827/A243A5A6BD8611F18BED64536D11F970/zrTFr0tpl_vsS9nakfjD8L7xtF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.86.133.0/24
Signature Algorithm: sha256WithRSAEncryption
64:08:f9:f6:9c:f7:e0:7e:05:86:23:a5:e9:0b:fe:a8:1d:31:
23:1a:62:eb:ff:b1:8f:83:62:27:d7:a0:e1:2d:87:78:8a:66:
a8:aa:69:a3:40:e6:b6:4b:92:23:10:0c:54:eb:6c:ce:c3:d4:
64:e1:c1:38:bf:38:85:45:a5:b7:57:2c:7c:85:86:17:ea:40:
4f:6e:59:0d:98:03:06:52:88:7f:31:c4:32:84:07:b9:31:50:
e4:12:1e:53:4b:f5:dc:f5:0e:53:d2:f3:a4:ca:a6:56:b1:39:
42:1a:60:5b:6f:99:20:35:ae:47:26:3f:b7:9b:07:c8:36:cc:
f5:28:4c:5a:a2:d1:a4:3c:63:c9:07:52:92:84:4a:e2:fa:f0:
ef:9a:eb:b9:e2:25:01:73:25:65:31:f3:aa:cb:be:10:30:3f:
37:08:b5:4d:26:52:91:f8:99:2f:4b:c9:74:64:52:dd:55:24:
b0:0d:86:fa:7a:dc:41:7f:85:90:e7:07:71:e1:87:fd:63:90:
12:d0:14:29:89:58:3f:c3:28:ab:1e:5d:3b:d9:a2:0c:ff:8d:
93:18:9c:2e:2e:c7:a2:2a:e6:cf:15:d2:b5:b9:a0:95:cb:a5:
e5:9d:5f:a3:ad:f2:a6:b9:9f:ee:52:10:8f:43:86:c6:41:80:
a4:02:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:07 2026 by rpki-client