Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer
File: 3g51A-ABhslzWN1dtBsa6o1bt98.cer (raw, json)
Hash identifier: pcnB53wdVtwaCavDIJ813yNG9wXbCqG1J4uh83DR7Do=
Subject key identifier: DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 828F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 15:40:47 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 132.237.192.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33423 (0x828f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 21 15:40:47 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91DEF3E, serialNumber=DE0E7503E00186C97358DD5DB41B1AEA8D5BB7DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:92:fc:fc:97:c8:4e:1c:4f:56:15:98:5a:
02:27:a1:2f:64:a8:48:47:c9:af:49:d4:cd:4d:31:
07:a6:2b:79:34:2a:8f:0b:ad:49:f0:bf:34:8b:08:
7d:c7:8f:75:97:42:5d:71:5b:e5:ba:69:ee:1f:50:
8c:c0:5f:20:e3:0d:ec:fd:ca:e4:19:6d:18:a8:4b:
67:60:88:9f:c1:57:61:06:68:8a:1e:e5:bc:22:4f:
5c:6a:94:6b:07:04:1b:29:91:f5:93:a8:7b:3a:29:
9b:f9:cc:fc:6c:c1:d8:1f:03:57:75:93:9d:c7:5b:
3a:01:92:47:03:de:b7:8e:80:30:49:c3:a2:bb:d2:
d5:de:a1:e5:1f:e5:70:20:45:b0:54:f9:04:4b:9d:
5e:ee:e9:a2:2b:44:8a:07:89:4a:95:76:ac:79:93:
03:98:de:de:cc:78:67:9d:49:38:63:df:78:8b:23:
84:f7:68:2e:75:69:41:21:34:49:71:d9:2c:c3:2c:
b7:51:f7:a9:83:a2:a4:2a:4b:6c:ee:34:6e:d5:4f:
6e:2e:15:2c:a0:ba:3d:ca:6d:23:76:5a:44:82:cb:
4d:66:11:de:cc:f0:b9:14:44:13:94:07:90:20:53:
20:d4:c2:17:24:8c:d3:4f:f1:9a:02:05:6f:85:a6:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
132.237.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:46:ce:eb:8c:ed:83:e7:01:28:c5:6f:a7:83:a9:a7:e9:be:
0e:f8:b6:20:7f:cf:d6:67:12:d0:5b:06:3b:7a:10:18:59:13:
53:bc:cd:47:cf:14:bd:0e:ea:2e:82:05:86:d7:c4:45:ad:e9:
bf:b6:32:86:f0:0f:39:58:f7:08:c1:e0:d1:97:3a:ea:31:2e:
7c:6b:b6:ad:58:82:13:5c:64:ff:59:46:aa:fa:be:07:e7:dd:
79:0a:d9:c7:d7:c2:5e:b6:f4:51:ca:9b:9a:0b:98:c4:84:aa:
3f:10:57:a5:ef:bb:e3:3c:1e:43:3d:90:93:34:17:77:67:87:
c8:96:6d:b6:06:64:d5:7a:24:36:1a:18:2a:2c:86:92:f0:42:
b1:2a:eb:19:b1:7c:83:4d:6f:0e:1b:ac:cf:8c:53:07:86:3d:
9f:8a:45:10:d6:b4:b9:92:06:3e:7b:4f:b1:b6:45:09:62:c1:
f9:78:05:1e:1f:02:1c:d9:f5:b3:db:42:72:64:16:2f:e2:7b:
ad:33:d0:9b:16:6b:4d:06:b3:d8:47:78:0d:33:fd:1a:e2:cf:
b4:a5:12:39:37:eb:76:eb:d2:22:97:cf:4b:ce:74:28:b2:f6:
f7:7d:b6:62:df:fc:dc:d0:af:97:94:96:74:76:2b:69:22:27:
95:2a:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:13 2026 by rpki-client