Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
File: Im9yidTjf-ziJgxk07y6esAxWnU.cer (raw, json)
Hash identifier: M7mGqxXDErp9p6wUvZ1ZM8SyxfrlGQtCpvAMp22Ohzo=
Subject key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 827E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 00:10:17 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 139.180.64.0/18
IP: 149.19.16.0/20
IP: 167.179.216.0/21
IP: 208.56.208.0/20
IP: 209.87.188.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33406 (0x827e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 21 00:10:17 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:64:8a:3f:4f:2f:3d:da:7d:22:17:e4:0b:
c5:b3:ba:b7:a4:7f:ea:a4:93:41:b1:c2:87:fa:a1:
46:07:46:24:7e:ba:52:e3:8a:bf:3b:13:46:e3:c8:
4a:d2:02:2b:c9:3b:92:f1:15:74:f2:fd:2a:f7:4c:
25:7d:0c:c8:f7:14:34:a4:ab:69:f1:9d:af:90:1e:
ac:83:e3:46:d9:f2:28:bb:b1:fe:62:77:31:f3:9f:
3d:0e:23:06:52:95:4b:fc:03:fb:ac:03:86:e4:43:
00:ba:5d:4c:74:72:28:4d:94:72:62:e8:52:29:6a:
b2:c6:1f:5d:50:30:ce:8a:c4:8b:08:fc:ae:e1:bf:
a4:3e:76:50:60:48:23:65:53:cd:42:81:b0:9d:bb:
ed:de:db:ac:89:d5:2d:e2:bd:fa:cf:49:fe:91:a2:
92:03:8e:47:dc:a6:b4:9d:3b:19:58:e7:e7:5d:42:
06:38:14:c2:4c:40:0f:b0:52:84:b7:5f:39:b1:05:
ba:df:f9:e6:6f:64:3d:79:fa:b5:c3:bb:91:eb:6e:
b7:7b:cd:4d:fd:2b:f0:2c:7e:1d:b2:7e:9a:32:27:
1e:67:9f:b8:98:bc:b9:65:3b:32:64:32:1e:20:12:
29:f3:ce:0d:e3:fa:19:ff:a9:be:07:20:b8:6e:c4:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.180.64.0/18
149.19.16.0/20
167.179.216.0/21
208.56.208.0/20
209.87.188.0/22
Signature Algorithm: sha256WithRSAEncryption
83:34:89:b1:90:80:8f:73:df:a5:f3:7d:a1:0d:a3:19:36:6b:
ac:60:ba:dc:fa:d2:ea:af:fb:3c:62:31:8b:ba:ef:f2:ac:fa:
a4:af:2f:e7:28:41:b2:ae:e0:53:c8:85:2e:07:10:63:4b:78:
66:95:c1:08:a2:8f:fd:9b:33:1b:dc:87:4e:9d:1a:0c:f4:5f:
01:e3:b8:c8:c4:94:c0:4b:15:60:de:8d:ed:b0:a7:cd:8a:57:
89:14:80:2b:fd:56:97:80:ce:b9:fb:9b:32:43:2c:37:00:d3:
62:d4:f7:21:1a:1d:60:e9:de:82:27:31:c3:78:35:0a:c0:38:
73:f4:50:ef:3a:15:12:56:c1:39:65:6a:6c:5f:b7:7a:a6:f8:
04:be:a8:e2:cd:f8:1c:71:20:0c:a9:12:57:b0:11:00:ff:62:
1d:ad:e0:c1:3e:2b:09:94:87:f6:7e:91:1c:a7:fc:63:8b:57:
01:69:29:c0:61:fb:6d:32:64:42:31:9f:81:00:9e:c9:60:aa:
a8:8e:39:bc:bd:47:54:92:4d:aa:4f:fc:82:84:7b:df:11:71:
4e:f9:c8:6f:9a:6f:54:ea:db:a6:9e:d3:64:9d:cb:b6:f5:9e:
86:da:6e:b3:79:90:9b:90:13:0e:46:f3:bf:53:08:0f:14:b7:
6a:55:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:44:55 2026 by rpki-client