Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
File: 4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer (raw, json)
Hash identifier: pmOpa22YNqDxUxlIidkyEQcmhnu0N2TfY+o4UcuSIK4=
Subject key identifier: E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A62
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Apr 2026 08:30:29 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.73.22.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31330 (0x7a62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 28 08:30:29 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A2FF9, serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:2f:8f:ee:9e:d4:2c:ef:64:8a:fc:12:9b:
18:5b:60:9b:a6:ed:cd:32:77:70:59:2d:23:ca:a8:
b6:08:3c:fb:f8:d1:f4:e7:d8:2f:5e:d1:41:5b:ae:
80:e9:44:e4:33:a6:2e:19:5b:db:77:00:31:d9:68:
74:6c:28:ef:fa:4a:74:05:14:d2:b4:07:bd:eb:e2:
51:9f:d0:6a:dd:ed:51:32:59:8e:a5:5f:fa:3f:fd:
eb:9f:db:7e:b3:c4:bc:4c:71:19:34:77:0b:9e:26:
7e:69:0a:e1:95:41:fb:e3:9d:04:69:d0:b1:2a:12:
61:c4:25:ac:43:1c:65:e7:0a:2d:65:c8:17:e6:63:
1c:67:73:00:06:96:6f:50:78:0b:41:46:bf:60:22:
e4:a9:59:d5:f1:0c:ee:5c:00:7d:3e:b1:63:b3:1c:
63:81:5a:95:f5:47:9e:b3:d4:9c:38:0a:55:bd:4c:
3e:94:82:c9:56:89:ca:cf:2e:92:d3:26:e2:04:33:
06:b3:3a:62:2b:91:d0:67:28:75:4d:0e:00:dd:50:
61:7c:30:10:c3:61:a3:a5:06:8b:61:fd:43:0f:08:
f3:eb:e0:f5:c1:a2:11:8b:4b:42:29:16:07:a4:35:
ce:1c:2b:0d:9c:02:50:98:1d:da:db:0a:43:f6:5d:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.73.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2f:61:e0:e9:9a:19:6b:ef:3c:2a:78:97:fb:5a:ef:1a:1f:
8d:13:c6:ec:45:31:67:c4:cb:b9:74:37:91:ad:b3:df:c7:6b:
d7:cd:93:8f:d8:a8:86:6f:c9:bd:77:26:1d:3c:f4:02:b1:86:
c6:ac:8d:b2:6b:a4:c4:11:65:bc:3e:03:78:a9:bc:8d:19:22:
9e:a2:15:96:de:9d:60:c4:59:63:ec:82:13:66:ce:0f:8d:ea:
2c:01:a9:9e:49:e3:b3:0b:10:b1:51:e3:56:c3:95:57:ae:56:
2f:72:cb:6d:5f:16:94:35:e7:73:b1:09:06:f6:79:ab:0e:94:
54:ac:70:26:60:b5:fa:ac:71:b4:78:3a:97:b0:2b:e6:72:0c:
cf:20:7e:f2:63:b8:26:dc:90:90:c6:4b:21:51:09:d4:5f:b4:
57:dd:ae:d6:8e:59:53:5a:62:8e:78:11:50:0f:5b:61:4f:a5:
84:a6:20:b1:ee:67:4b:49:2c:e0:71:ce:9c:19:f6:c3:93:46:
d2:f2:a1:51:0e:5c:b1:7f:d3:cf:7e:29:0b:1b:f2:1e:a7:0e:
19:47:c7:25:0e:01:b1:9a:af:22:e5:7b:6c:62:72:a8:c0:3f:
9a:6e:29:a2:0b:7d:5f:eb:72:c3:c7:11:2d:04:88:4a:05:9c:
f9:e4:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:14 2026 by rpki-client