Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
File: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer (raw, json)
Hash identifier: V7SVSdi7iItDYzAhRtetfLVJh6qZ4+p7G23E+NYjaSc=
Subject key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A1F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 07:13:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 206.109.68.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31263 (0x7a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 23 07:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:25:cd:b2:1c:9d:48:e9:7b:dd:01:21:59:
6a:f2:c1:ff:bc:15:17:c6:1c:99:85:9c:0b:ed:fc:
62:62:49:67:31:d6:86:12:37:72:af:89:f2:4b:f5:
38:50:f5:2a:32:89:a5:ab:e3:b0:1b:5b:bb:8d:37:
0c:88:4a:3b:a5:9f:15:a5:2b:8c:da:85:f0:35:7c:
98:94:3d:20:8a:84:df:af:0a:1f:3d:df:66:96:21:
6f:1a:a2:5c:95:6b:2a:67:56:0c:25:6d:15:b4:7f:
27:78:25:e7:da:45:d7:da:40:a7:4d:17:c6:6c:42:
e7:4e:c4:df:c4:99:b3:c3:5d:7b:e9:bd:45:c2:8b:
0d:7c:85:f7:54:ec:cc:d4:f5:97:29:1a:10:a6:7c:
db:40:04:3f:b9:df:35:95:50:d2:f6:e0:96:ce:44:
2c:78:c8:3f:d3:68:8e:ae:26:fc:52:c0:73:d5:04:
94:08:cf:25:e3:30:63:a8:76:18:1c:9b:d3:9c:49:
07:09:87:7f:7e:d1:6b:21:0c:d1:ff:42:b5:53:dd:
3e:60:c6:93:2b:ba:8c:fd:52:0d:09:1b:c3:ce:86:
53:c5:2f:99:a9:d1:6d:a8:73:89:5f:dc:33:fa:42:
8b:8a:5a:b7:c8:37:00:aa:b3:1c:31:ca:5d:3d:30:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
206.109.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:e7:40:ae:87:e4:07:b1:1d:9d:ed:0b:f3:96:81:b7:04:6c:
1e:32:78:74:d9:13:6d:95:bf:d6:61:18:1b:0f:d9:e2:fd:1e:
29:bd:46:c5:8b:7d:dc:10:ad:a0:3a:bd:1a:10:b7:54:47:fe:
17:2c:8b:66:14:36:ad:38:54:9d:8f:2e:5e:81:16:95:03:dd:
45:7c:9c:dc:b4:44:06:94:b5:0c:29:85:28:c4:18:f8:63:78:
e4:86:5d:71:cc:28:17:65:0c:64:42:bf:bd:96:4c:89:4d:ff:
ce:22:22:e0:73:0c:b2:66:86:f2:8e:22:b4:f2:21:89:71:74:
a9:9c:2e:d7:f3:48:01:6d:d2:1a:10:2a:d6:26:b4:b8:8b:f3:
fb:4f:52:32:dd:c7:51:f2:10:f6:12:0b:9f:52:b5:1e:63:89:
d6:81:7e:06:ff:04:c5:dd:c7:e6:bf:48:a9:1d:6e:31:be:7a:
59:40:61:6c:56:9c:1e:5d:c2:65:df:2d:12:3c:1b:87:a7:9b:
3e:47:0a:f2:23:49:01:41:d2:6a:73:df:b0:a4:17:12:6e:df:
24:76:20:d4:26:6f:83:f4:f9:4d:c1:a5:5b:6f:73:b4:f8:9c:
34:7f:ae:b8:2a:08:e2:35:ac:99:40:d4:ae:6d:6c:25:ce:69:
21:f6:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:50 2026 by rpki-client