Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
File: MtNTdDyP4vCOl7IuW2CavBTM_js.cer (raw, json)
Hash identifier: xAdGXP5Bzoql9uCmzaYBc9myBO5smorjOtiOPOxzSn0=
Subject key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8281
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 04:32:07 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33409 (0x8281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 21 04:32:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:88:6b:b6:02:b5:4c:bd:18:39:93:f9:4a:
19:dc:8e:b6:5a:62:54:f4:a5:97:c9:78:7c:61:c7:
35:9f:fb:1a:5b:35:66:b2:e8:55:2b:4c:3b:31:a8:
7f:9f:6f:e0:7c:de:02:38:04:26:9b:ce:df:9f:c4:
ae:68:8e:5a:4f:71:aa:10:29:69:9d:ea:02:9c:e4:
ad:4d:af:2e:2a:92:01:4d:4f:cb:87:19:58:a2:71:
0f:cb:fa:05:19:6e:6c:86:af:01:37:af:77:8b:a6:
c3:76:c9:bd:5a:f7:37:bf:05:4f:71:ff:a4:57:01:
a1:c5:c2:29:75:17:78:c6:50:20:a7:af:3a:c2:67:
f6:e4:5b:b5:1e:d5:7e:b1:0d:2c:a8:0b:ec:00:ea:
b9:2f:6e:81:4b:55:e6:37:66:c2:86:a3:d1:1f:8c:
6c:0c:fc:a9:53:eb:f1:ae:1c:0c:52:7b:39:8d:3b:
68:e5:ee:88:4c:ec:3d:85:66:82:fe:57:50:35:37:
ea:7e:b2:7a:02:ff:50:60:e0:d6:ff:91:1c:05:97:
53:29:30:05:40:50:00:3f:02:9a:86:75:13:a6:db:
a3:bc:29:88:32:e1:33:9e:5c:ec:ee:cd:38:d0:0f:
52:2d:1a:a3:f5:c5:fa:21:21:f8:fb:e1:d9:cf:1e:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.178.0/23
Signature Algorithm: sha256WithRSAEncryption
83:ae:93:3d:fa:5f:c3:bb:63:ec:aa:f7:7a:cb:70:d0:17:4d:
0e:ff:26:a1:ec:9e:33:2d:3e:8b:7e:e2:05:67:7c:4d:f5:e0:
03:a5:6e:8b:3c:80:fc:59:c2:8f:5b:e2:8f:cd:a4:4a:b0:99:
16:d8:3a:6f:45:bc:d2:cc:ca:e2:65:9a:20:f0:dc:53:15:a6:
4a:f3:b5:97:07:2e:20:9d:37:cf:46:d7:ac:52:1d:0f:cc:c1:
51:81:63:2d:6d:88:df:d2:a4:e4:9e:d6:21:bc:ba:fb:01:86:
4c:21:4a:bc:c9:0f:d9:1a:df:06:03:e6:b4:ca:77:c4:81:e8:
29:55:9b:f7:72:99:39:1d:b5:17:53:38:a8:10:8c:6a:ab:bd:
e9:f3:4f:cc:e4:ad:44:ff:60:b4:fb:46:fd:75:2e:07:50:86:
2e:4c:4d:43:81:7b:42:72:c1:d7:50:bf:26:61:b7:06:18:f1:
1a:a6:76:65:8a:ea:ca:46:ca:13:de:eb:0d:c9:b7:ce:b9:a4:
23:22:51:af:f7:1e:97:c3:63:3e:a0:bb:48:9d:46:ae:9f:e7:
70:65:03:a7:28:2c:45:8b:3c:c3:62:de:c3:39:90:60:1b:a1:
aa:68:9d:a2:6d:72:b1:45:cf:53:13:34:3d:d9:e2:9d:a8:e9:
59:ca:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:03:42 2026 by rpki-client