Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
File: SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer (raw, json)
Hash identifier: +iv96r3NaRJt8yDYXIAME04sVMlgyR0CKCNltTyz72w=
Subject key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7873
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Mar 2026 14:27:53 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.60.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30835 (0x7873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 11 14:27:53 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:bc:b3:fc:b5:02:34:cf:a8:0e:87:fb:ad:
cf:27:4d:fd:4a:4d:b9:37:37:6b:74:6f:1d:7e:37:
27:73:53:8b:c0:35:0a:df:b7:a5:bd:a0:ca:d1:7e:
6d:a5:eb:c0:7d:dd:7d:e3:f8:37:d2:5a:52:1c:a9:
84:75:43:92:fc:cf:7b:e6:6e:56:98:8a:40:e9:61:
50:90:24:fc:9d:e2:bb:19:f3:8a:ca:10:72:b4:3f:
b0:fa:f9:6e:c0:c8:e1:2d:3d:30:cc:33:a6:70:32:
2d:1d:a5:d1:af:a1:2d:9e:86:3d:37:7f:57:c1:59:
af:ee:fa:3b:6b:2b:fb:c7:05:cb:82:ba:5c:0d:b0:
65:1f:c1:60:fc:1f:12:21:cf:f4:83:c9:28:eb:c6:
04:af:b5:98:0b:57:1c:bd:5f:89:2c:4d:32:26:e2:
7a:f5:ac:66:48:cb:ec:8d:64:09:b6:18:cd:67:44:
f8:50:01:7a:17:5a:87:9e:d2:21:ce:87:e6:52:1b:
aa:de:cd:89:11:58:2e:ec:c9:23:39:56:d5:ce:42:
e8:cb:46:77:cf:8a:cb:d7:87:bf:5e:64:99:65:e4:
6c:95:3e:a8:2a:33:23:60:bb:01:88:79:b1:dc:6c:
68:04:01:4b:7d:cb:55:4d:e4:c1:04:39:16:50:e9:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.60.0/23
Signature Algorithm: sha256WithRSAEncryption
89:9c:5d:95:c3:26:d0:48:97:b1:18:a8:b3:af:4d:f8:9f:78:
68:a8:57:8a:93:df:60:06:fd:9f:a9:df:56:68:cb:47:37:21:
db:ee:8c:a9:bd:da:45:4e:9c:f4:53:e8:b6:63:34:b1:15:cb:
08:09:bc:d2:ad:b2:d3:99:31:18:a3:79:a1:9d:37:3c:a6:60:
8d:2f:ef:89:26:cf:f8:04:53:c2:7a:29:2f:ca:3b:d5:1a:a6:
f9:a8:da:7e:dc:36:81:04:ed:52:d9:8e:a2:c9:39:42:0f:db:
83:9c:b9:f1:29:35:ac:f4:f0:5d:c9:00:e6:c1:3d:32:cd:75:
89:86:fa:c9:93:3b:10:24:cc:5f:6f:ff:55:1e:42:0f:42:06:
bc:a6:14:8f:ec:2c:ea:ad:fc:68:7a:54:49:51:cc:a0:56:48:
2a:7c:17:65:8f:14:4c:29:1f:7e:6c:3f:3d:de:ae:d2:84:cb:
c5:37:85:b5:59:c6:ff:61:c2:1f:3e:c0:22:7d:a3:02:76:39:
7d:3a:70:ac:c3:5b:b9:7d:92:9e:70:b4:43:46:7b:cc:ea:d0:
64:2d:eb:bf:d0:d5:94:f7:17:66:fb:5e:1a:8b:b0:2b:1c:49:
5b:07:0d:67:06:e7:25:73:44:c9:fd:aa:d8:d5:74:e6:0c:85:
88:61:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:37 2026 by rpki-client