Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
File: Kz24XvlSI40ZLc8XDua-scjbA6k.cer (raw, json)
Hash identifier: CN7HjjpIk8eInmTKzzGQNua4nLsycA37eOtCSe6Mp/s=
Subject key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7ADE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 14:03:38 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.111.102.0/24
IP: 192.150.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31454 (0x7ade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 4 14:03:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:27:f2:d4:8d:c7:53:2e:bd:ce:c3:e9:63:
83:a9:ec:dd:af:50:70:7b:6d:36:0c:a6:96:37:3d:
4f:95:41:5d:5c:48:74:0c:86:be:2b:cf:ab:79:1a:
32:fb:35:a9:a8:a1:d9:d4:82:e4:c6:f8:0f:17:62:
e1:74:9c:b9:c0:d0:5a:63:41:06:4f:2d:36:e1:30:
c4:d7:69:c7:01:b0:0a:62:d8:7e:fd:6b:4b:8c:db:
fa:a3:a4:f5:50:1e:4a:da:ca:87:fa:dd:f5:08:f0:
ac:db:7e:c7:3b:d5:40:4d:cf:4d:6e:ff:0c:a2:7c:
94:28:bf:fd:af:c5:88:08:33:20:c3:5f:e6:06:81:
55:7d:38:fe:64:33:8b:75:bb:1d:bd:ca:2d:b6:ac:
fb:ac:af:e7:30:38:9b:4e:71:88:f5:4e:69:c3:81:
e6:61:61:a4:79:77:4e:8a:2a:03:e5:b2:dd:59:f0:
e4:ae:43:af:3d:db:05:52:92:9c:ba:a7:37:d0:5c:
88:b6:f9:bf:a5:91:e8:a7:13:06:d5:db:69:31:8e:
2e:50:40:3d:31:32:9e:17:21:a0:52:fb:f1:f3:be:
86:f3:7e:0b:60:8b:e4:c0:18:99:ec:6b:38:14:3f:
41:39:60:a5:c2:65:0c:e5:e2:a7:3d:29:5b:55:72:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.111.102.0/24
192.150.218.0/23
Signature Algorithm: sha256WithRSAEncryption
06:3e:91:e9:5f:43:aa:f4:4d:a2:0a:57:4c:ec:96:b8:53:7b:
ff:90:bf:ba:25:03:41:32:3e:df:30:8f:6b:f3:a0:f0:08:59:
b7:43:b0:81:b5:08:60:d2:e2:a7:91:fe:e9:32:68:41:6e:d5:
62:53:ad:8b:a6:e5:a9:84:6c:33:e3:1e:a7:7a:f6:57:e6:f2:
84:4d:6d:76:04:9e:d4:69:ef:47:d6:56:fb:2b:1c:1b:51:f4:
2c:97:6c:5e:9d:06:d1:64:1f:1d:b7:90:ad:62:13:91:22:56:
c5:0c:75:bf:17:54:cc:45:8f:e0:40:53:fa:25:5c:5e:74:49:
13:42:d6:88:73:52:3a:9a:e8:22:a2:af:d6:0f:2b:cb:ad:e7:
2e:1a:b7:67:05:a6:34:e8:04:eb:8d:d3:b5:69:25:4d:cb:67:
7d:77:40:0d:fb:17:33:ca:a7:fc:c5:01:88:35:25:56:81:57:
f6:c8:f9:55:d5:92:25:fc:dd:cf:28:17:55:fb:5a:a1:ea:92:
63:d6:9c:aa:9f:c7:c5:23:07:38:83:50:7f:66:9e:6d:cf:86:
bd:36:91:98:2a:dc:f8:9a:82:2e:6b:77:9d:ed:5b:b1:e6:7b:
4e:3e:15:2b:c5:d3:ff:87:9e:20:3c:56:9f:a5:e0:ec:a4:ec:
46:07:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:16 2026 by rpki-client