Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
File: JCq5H6fHpkrOd9m09mHijAsVuOA.cer (raw, json)
Hash identifier: O19yOKdNxhwbIgaZnDsUrUE/2Fe/fgQBZB8/GthXJkU=
Subject key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F20
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 12:31:48 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.4.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32544 (0x7f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 22 12:31:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:ac:ba:c3:8f:43:61:41:b7:41:5c:59:b5:
64:66:cb:a2:e3:17:5a:32:13:cc:7b:be:64:cc:bb:
91:dc:f6:d7:89:eb:f9:63:bd:13:4a:70:74:77:30:
cb:e2:90:21:93:83:a5:f1:ac:6e:a4:4d:ee:f2:94:
fa:5c:23:aa:60:1f:a6:33:55:34:77:95:ee:a7:16:
88:68:17:80:42:bd:20:15:71:30:55:d8:98:5f:cc:
97:5b:9a:36:b7:6b:3c:00:e6:d0:1d:d1:83:94:37:
88:21:7d:a3:eb:49:19:bb:60:fe:bf:12:c3:92:e8:
62:cc:d1:98:f6:71:5b:e9:1a:68:da:2b:4b:f7:f3:
34:39:63:68:ad:d8:e1:a0:df:8a:8e:28:60:49:e6:
80:eb:2a:da:90:a4:9e:8a:8a:37:59:08:90:0d:37:
75:76:77:94:37:6a:6b:d0:fd:f9:63:2e:7e:80:04:
40:24:1b:d6:2d:36:4c:d9:8e:fd:77:f4:43:ce:29:
dc:36:8c:96:09:d5:0f:62:ff:84:30:f2:b9:16:65:
73:1a:ea:67:ee:54:71:8f:e3:59:19:9e:8a:5e:08:
e7:6e:f3:4b:1f:3e:b8:8a:e2:f9:2a:87:b1:5a:fc:
00:e9:ef:25:2a:01:1d:0c:f1:86:32:a3:95:a0:a5:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.4.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:b8:aa:b0:b8:bf:47:8b:0d:03:e4:8a:83:ea:28:a9:92:bd:
9f:cb:85:9d:35:0b:20:72:7a:34:99:7e:8b:d0:e3:69:e1:34:
fe:b4:e7:ad:e3:ec:d7:6c:b0:00:e1:3b:93:a0:f8:68:bf:6e:
8c:e5:e3:9c:76:78:29:89:a4:84:78:6a:d3:e9:8a:a1:41:48:
c0:50:f8:6c:00:88:59:5e:2b:f2:72:13:db:1f:e9:7d:4a:16:
e0:07:a6:02:89:84:51:92:43:45:c1:b8:6f:a3:42:ec:ee:11:
b3:1f:ef:80:7d:50:0f:20:39:35:79:99:14:3e:83:0c:15:4c:
3a:d3:12:44:d5:3e:a1:d9:11:13:b5:1e:04:8f:0c:19:b7:24:
26:a7:3e:7f:be:82:c6:5a:f7:6e:82:31:23:2d:8b:2b:f8:8f:
c0:af:31:10:44:47:5d:70:10:53:7a:19:2c:81:96:c4:c0:de:
b8:55:b1:cb:72:87:95:13:ac:37:73:11:1d:d5:b1:3e:97:19:
e9:03:85:53:f8:d0:3d:1a:51:37:c1:4a:89:8c:fa:04:f7:a2:
2c:70:55:d8:22:9d:92:a0:6e:9d:0f:16:8f:ae:e4:9a:d3:a8:
ba:16:57:9c:3d:c5:c4:4c:2a:d2:ff:6b:d4:2f:b3:87:94:29:
64:2a:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:44 2026 by rpki-client