Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
File: F9X-Mj6_2ajTROd7c3majnViQ1I.cer (raw, json)
Hash identifier: plxcdxvhyMhUcrPv1dDrff2Ble6BKdKF3xgIfeUJnd4=
Subject key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7896
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Mar 2026 00:49:48 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 166.120.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30870 (0x7896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 17 00:49:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:60:9e:99:1c:fa:8e:51:8e:34:1b:25:21:
3f:ad:e3:d7:73:8e:bb:b4:ec:31:57:ad:57:8f:6b:
6a:e2:d7:d6:f9:57:da:18:86:07:e5:54:2b:b8:ed:
04:d0:c0:b1:b7:d6:4d:a9:00:f2:a8:ed:74:25:04:
f2:89:60:97:2b:6e:8b:a8:20:1c:49:01:d8:bb:45:
20:89:61:f8:4b:78:ad:f7:a7:4d:8b:ba:28:12:75:
cd:82:26:e3:f7:8a:34:98:3b:97:9a:2e:39:3f:f6:
38:6a:45:e3:ec:03:9c:b0:86:86:9a:19:9e:4d:12:
f3:e9:e2:de:17:73:1f:52:e1:50:0d:b9:69:61:9d:
9d:37:a4:bb:e9:ca:0d:6e:64:9f:45:99:bc:8d:d7:
a1:e0:ee:80:c7:e4:e8:5f:14:3e:ab:60:0d:44:37:
c6:f1:10:f0:3e:8e:ed:9a:cf:c6:a8:5b:89:21:45:
7e:0b:e4:19:87:92:92:37:0a:d7:14:89:d2:ff:ae:
10:4b:94:b1:08:1f:f9:b6:9c:f9:e3:d9:6f:2a:36:
f9:e6:a8:d9:dd:f7:e4:39:0d:52:3b:88:9a:59:83:
69:35:12:a7:54:5c:a2:6b:3d:13:b9:29:3f:e2:ca:
b6:c9:3f:45:1c:a6:79:c3:a4:67:76:29:4f:ba:a5:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.120.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:e3:dd:8e:a2:96:ce:ec:cb:c3:0c:81:1c:1b:c1:32:5e:91:
be:55:6f:f6:69:32:67:24:21:73:9b:82:57:67:65:3d:02:16:
d7:dd:c0:ba:e7:a8:76:07:c6:c6:09:a6:b4:a4:bc:26:aa:b9:
8f:56:45:d3:9a:21:2d:32:27:cf:e4:f5:f0:1d:d4:52:5d:61:
b2:98:4b:75:5f:15:15:54:f2:f5:98:19:06:68:20:a5:22:3a:
cb:a4:6b:3f:9e:d1:38:16:b3:cd:02:c4:cf:c1:0a:79:14:3c:
93:22:19:76:f5:41:a6:88:8f:87:5f:3b:54:e1:cd:82:8d:69:
9e:aa:32:89:51:f6:92:82:a8:8f:1d:07:31:fc:cd:41:44:c8:
be:93:f3:90:ef:f6:2b:7f:27:eb:30:48:f6:24:f7:ae:e6:07:
21:38:f8:73:26:91:d6:ee:56:3a:02:ba:fd:3f:ca:4e:e0:45:
08:d4:66:92:5c:fa:80:b5:4a:9f:48:64:ca:16:a1:8c:97:7b:
71:7f:63:bf:b0:e8:1c:3d:a7:aa:e8:df:3d:99:49:20:1a:16:
a8:27:15:11:de:32:2a:1d:b1:61:56:9c:c5:e5:53:8d:20:1b:
77:4e:d6:8a:35:8f:1a:d3:75:ce:60:37:49:96:93:37:e5:55:
93:ec:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:08 2026 by rpki-client