Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer
File: KjesOrJaN9-11OoQA5lo3jG-NMo.cer (raw, json)
Hash identifier: ulRcKsQL3o2Z/bD1nyvwZwwKzhRSMAqg/os2Jym5dWo=
Subject key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7AA6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 02:53:24 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.66.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31398 (0x7aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 1 02:53:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:4a:2b:2f:21:cd:cd:e4:81:b2:1a:19:00:
44:fc:b2:35:0d:c1:9a:27:e3:32:42:bb:97:ae:72:
5c:f0:db:d1:b8:82:be:a7:7d:39:ab:bf:e8:ff:6a:
6e:06:ce:5c:2b:c0:b7:69:2e:4e:b6:9d:9f:8e:d5:
05:9a:3e:a1:82:d4:36:20:ef:56:7a:24:8b:03:d3:
88:0c:23:ab:4d:c9:7e:f6:25:63:49:ce:28:dc:8b:
dc:a5:44:cc:b5:ba:46:d4:63:67:ac:c4:50:f0:62:
ab:4e:d1:d3:01:54:bf:01:38:a7:bc:93:eb:0a:07:
1f:a3:c3:26:44:d8:28:d5:72:0d:46:5c:ea:72:71:
25:a6:47:e9:2f:0b:1b:b6:c7:8c:f6:1d:e3:9f:f7:
d8:d8:43:9a:bb:c4:62:44:da:c7:75:04:bc:11:cd:
aa:65:a5:59:72:e7:6b:fe:e5:d2:71:ab:08:a4:a9:
83:38:ea:00:1b:4d:84:f5:cf:35:d5:7b:0b:fe:c5:
a6:28:b8:73:32:89:ef:b0:64:3a:db:97:2b:95:ef:
65:d0:83:e2:90:2b:15:8b:33:29:27:39:49:b0:e2:
a2:14:53:21:e7:3e:12:8e:da:1f:05:91:d0:42:9d:
5c:3e:f9:ef:4a:e8:33:93:4a:2b:3f:4e:bb:39:f2:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0b:f5:a8:e0:c8:d3:32:79:c1:9f:10:70:92:8a:fe:a9:ee:
63:69:bc:7d:53:3a:12:d0:de:cc:63:a3:14:12:59:5b:7a:22:
b7:de:2c:54:e0:6a:e4:6c:3f:84:13:dd:18:b9:43:5d:86:fd:
b1:46:96:33:5a:99:52:ba:f6:b4:18:5e:7e:18:84:2c:71:f7:
98:fa:d8:a6:72:49:ec:94:12:a4:8e:1c:09:7b:50:da:b6:6d:
12:a4:95:1a:93:f7:f3:67:2d:ac:33:76:bb:df:83:4f:c1:de:
ab:7c:f9:bd:9a:00:8f:73:c1:97:b9:86:f9:81:39:c6:e9:ea:
78:03:2b:cf:84:4b:62:8c:c4:25:25:a4:eb:5c:cf:f0:69:b7:
90:66:89:a0:cb:da:f4:32:5b:ee:a4:7d:3a:75:16:e3:47:c8:
ed:f4:e2:0a:66:43:7f:95:cf:0e:8e:04:b6:00:a5:48:a5:d7:
e8:ec:82:15:b0:24:c8:26:2c:a7:15:24:93:90:e2:01:3b:3d:
88:d2:2a:92:c0:43:eb:8c:4a:8d:3f:cc:49:c2:bb:b7:43:d0:
65:f3:79:98:18:a1:ec:e0:64:89:87:55:06:df:cd:5c:ff:cb:
d6:0e:c6:ae:0a:b1:b5:21:4b:d5:f3:cd:8c:25:37:87:01:21:
19:de:41:bf
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNTAxMDI1MzI0WhcNMjcwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGMTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEw
MDM5OTY4REUzMUJFMzRDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALuASisvIc3N5IGyGhkARPyyNQ3BmifjMkK7l65yXPDb0biCvqd9Oau/6P9qbgbO
XCvAt2kuTradn47VBZo+oYLUNiDvVnokiwPTiAwjq03JfvYlY0nOKNyL3KVEzLW6
RtRjZ6zEUPBiq07R0wFUvwE4p7yT6woHH6PDJkTYKNVyDUZc6nJxJaZH6S8LG7bH
jPYd45/32NhDmrvEYkTax3UEvBHNqmWlWXLna/7l0nGrCKSpgzjqABtNhPXPNdV7
C/7Fpii4czKJ77BkOtuXK5XvZdCD4pArFYszKSc5SbDiohRTIec+Eo7aHwWR0EKd
XD7570roM5NKKz9OuznyfgkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQqN6w6slo3
37XU6hADmWjeMb40yjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE3NDUvRTg5NThFRTQ0NTA4MTFGMThCMkUyMkNDOTE4MzM3NzMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYxNzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckph
TjktMTFPb1FBNWxvM2pHLU5Nby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaIEQjANBgkqhkiG9w0BAQsFAAOCAQEAHAv1qODI0zJ5wZ8QcJKK
/qnuY2m8fVM6EtDezGOjFBJZW3oit94sVOBq5Gw/hBPdGLlDXYb9sUaWM1qZUrr2
tBhefhiELHH3mPrYpnJJ7JQSpI4cCXtQ2rZtEqSVGpP382ctrDN2u9+DT8Heq3z5
vZoAj3PBl7mG+YE5xunqeAMrz4RLYozEJSWk61zP8Gm3kGaJoMva9DJb7qR9OnUW
40fI7fTiCmZDf5XPDo4EtgClSKXX6OyCFbAkyCYspxUkk5DiATs9iNIqksBD64xK
jT/MScK7t0PQZfN5mBih7OBkiYdVBt/NXP/L1g7GrgqxtSFL1fPNjCU3hwEhGd5B
vw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:27:16 2026 by rpki-client