Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
File: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer (raw, json)
Hash identifier: JmC/yWF9Vk1R/R48hPRtMV8KDYUDnL5U+ODxD04Ng10=
Subject key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7AE0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 14:38:43 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.52.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31456 (0x7ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 4 14:38:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:2e:e5:88:e0:f1:63:64:85:2d:7e:a7:0c:
59:13:a0:5a:9e:91:0c:49:d3:a0:18:cc:94:d6:58:
80:73:57:2f:f0:69:6c:29:0a:50:15:0f:52:b3:62:
f1:23:2e:00:b0:ba:57:77:8d:bd:51:24:2d:e0:16:
ac:b3:48:48:0b:42:a9:51:9a:1e:b0:ad:2b:f5:49:
b8:d1:e7:e8:ed:f6:97:ae:de:ac:3e:72:1e:1b:33:
80:36:82:df:89:f3:eb:f5:1f:d6:6a:0e:f1:e7:8e:
2f:b7:8a:51:96:9e:1e:64:71:a0:d5:d8:59:20:9c:
ed:77:18:ea:95:07:30:fa:24:30:0e:57:c8:52:3a:
7b:f5:8e:ed:3b:52:3e:58:bd:3c:68:3d:93:11:7f:
1f:a7:dc:3d:db:8a:b5:bd:e1:dd:b3:f2:3f:42:a2:
ce:df:c0:0a:6a:61:cc:25:68:10:8f:11:14:c6:c1:
c9:e9:d8:0b:6b:1a:b6:44:8a:be:8b:fc:8a:fc:c2:
62:f8:66:c8:dd:8c:d8:db:f4:bd:12:cf:de:15:2c:
71:a2:16:4e:76:1b:bc:f2:85:d3:71:9e:2a:e3:77:
35:0e:43:9a:b1:98:90:21:54:1e:93:78:4e:00:b1:
0d:52:95:ef:c2:57:ad:66:9e:c0:22:83:54:23:81:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.52.0/23
Signature Algorithm: sha256WithRSAEncryption
67:9d:19:b7:a9:d6:9d:6e:8a:c2:f9:53:d5:dd:98:f1:d5:17:
21:ed:e2:60:bd:99:34:a0:e1:3a:f9:59:9d:e5:b0:08:04:48:
e9:76:3c:d2:7a:63:92:37:7a:8b:47:9c:6a:35:fa:54:22:61:
23:34:dd:94:54:b7:66:06:a6:d1:8c:13:5c:c6:f0:be:02:dc:
f6:a4:94:4d:d1:3b:1f:42:f8:87:94:44:c5:04:c4:c6:9b:6a:
35:2a:f8:6b:ae:d8:25:16:f3:6e:0c:4b:d5:25:7b:f5:1f:54:
47:ce:56:ec:79:33:66:0e:32:0e:d8:d9:75:ef:e7:62:b4:c0:
53:22:d6:85:85:94:ee:0d:01:95:a8:21:9d:e9:5d:13:b6:db:
d3:95:18:db:51:e6:fd:e1:71:e8:27:58:66:f0:43:88:b0:d3:
0a:e9:2e:35:61:78:52:7b:91:05:fe:70:b7:d1:8a:4f:12:32:
ed:47:8d:41:3c:e6:ca:e3:8a:0b:43:c4:04:95:64:75:ca:39:
b5:12:d6:c8:c3:c7:ef:b6:65:98:35:17:19:1f:54:49:f7:ef:
bf:38:b2:cc:e6:20:31:0e:4d:d3:3f:1c:7a:4b:fe:5a:fe:3a:
43:c6:3f:a9:67:41:23:7c:1f:07:2e:d3:77:f5:34:1b:15:a8:
8a:24:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:16 2026 by rpki-client