Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
File: 0I2GgcK-TUfCopBV9m5olVhGF_c.cer (raw, json)
Hash identifier: PLt6qMwyT2lw7Hq+sEJfcPuZl+9qAajAu46WzNvJtZs=
Subject key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8294
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Sep 2026 14:24:39 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 192.249.42.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33428 (0x8294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 22 14:24:39 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:0e:5f:0e:c6:db:84:62:b1:5b:a3:23:36:
a4:7a:c2:91:ae:e1:35:8d:39:77:0c:83:46:c2:7b:
f4:aa:b3:7d:d2:60:d6:de:88:06:19:76:79:98:20:
ce:52:56:52:ee:88:09:9b:0c:54:33:79:84:09:ce:
4a:62:14:08:f5:ca:8d:ee:b6:64:4a:1d:fa:76:48:
22:29:36:7c:1e:5d:79:86:e7:df:da:70:cc:fd:72:
75:76:43:ad:c0:17:69:fa:b3:db:32:77:81:70:8b:
1f:b7:a2:0a:8b:61:96:f1:1e:88:e7:4a:8a:44:e6:
20:1a:25:63:ac:5d:7b:b8:4a:8e:bc:3c:ff:66:49:
20:8b:49:bd:5e:4e:6d:dc:f5:79:55:e4:f3:79:ee:
b6:c6:c3:e7:79:18:c8:46:da:ae:b5:c1:ad:71:8c:
57:c7:4a:e9:70:88:8d:f1:ab:92:cb:75:f0:51:d1:
df:f3:81:2e:84:f6:7a:0e:93:46:c5:84:99:29:cc:
0b:86:b6:4f:00:0a:24:4a:7d:b3:45:bd:2d:72:f6:
57:31:22:2c:a7:8e:30:9e:2c:0c:6f:cc:da:ca:c4:
72:48:42:55:92:54:f2:eb:e0:9b:33:33:c1:b0:82:
8a:76:3d:54:06:a2:24:99:72:61:99:de:2e:e5:7f:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.249.42.0/23
Signature Algorithm: sha256WithRSAEncryption
57:04:fd:13:58:eb:9e:e3:22:56:d7:2c:0f:d2:5d:01:a4:9f:
4f:1c:e1:ce:8b:5b:58:23:00:c9:6a:75:ab:8d:e4:60:fb:ea:
44:ac:d4:6e:dc:9e:5b:e0:e9:62:d5:eb:f1:af:5a:78:e6:95:
ce:4d:2d:31:48:ff:24:2b:74:b0:b5:ea:4b:fc:7f:0e:00:5e:
6c:3c:17:bc:80:35:2f:c5:0b:51:dd:6e:00:c8:73:7d:c5:e7:
49:32:99:cd:35:0c:e3:d7:34:93:65:6d:8a:2a:9f:7d:1a:13:
97:54:51:5d:9c:29:d8:85:12:3f:b6:00:ca:2a:84:8a:0c:c4:
82:86:78:b1:88:de:e8:c6:3d:82:6e:e9:e7:4a:a3:d9:59:b6:
97:27:b6:cc:2f:78:24:5e:3d:db:76:89:7a:41:e1:f6:bf:2c:
d4:75:fa:91:b1:5b:d8:cb:99:c8:46:78:5e:b6:7c:45:b3:84:
c9:79:0b:cb:b0:af:bb:dc:4a:6a:77:78:8e:f8:69:34:46:f6:
71:fc:bb:c1:7f:ff:8a:e0:3a:3d:97:68:11:4b:e5:36:5d:b7:
89:78:f6:d2:31:d9:fc:a3:94:ba:3d:98:9d:60:7d:7c:eb:f3:
8a:7a:13:4e:30:a3:88:bb:7b:76:c1:e5:8c:8f:84:23:26:47:
5c:8c:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:58:13 2026 by rpki-client