
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
File: Sr9max48bHEsS0dwG_3RV94Djy8.cer (raw, json)
Hash identifier: Wrc4owefGtrU7IGXXtBp9CYOOI8pJOQnIfnjV46cylU=
Subject key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A83
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Apr 2026 08:41:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.48.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31363 (0x7a83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 29 08:41:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:5a:01:58:c8:b0:8a:db:98:1b:4e:f5:2a:
52:1b:70:b1:67:f6:d1:83:4a:b3:de:76:d4:db:0e:
97:5c:1e:c6:71:24:e8:47:1c:a8:d9:65:a0:6c:72:
cc:78:84:fe:b4:26:45:d6:29:19:0f:27:b5:22:56:
33:fb:07:89:7a:24:40:5f:62:c0:ac:52:14:02:e8:
6c:73:e8:65:17:e1:d8:55:08:a6:86:ac:76:eb:4c:
85:a3:cc:e1:5f:b1:26:e1:6b:c6:d1:20:cd:5b:00:
89:94:ad:9d:c4:11:2e:a0:93:57:22:98:ab:69:40:
d8:29:42:40:17:74:cf:63:86:70:72:71:e8:3a:1d:
9f:a4:0f:06:21:b7:11:fb:ca:b0:92:32:75:d2:6c:
aa:12:c3:a9:b5:49:45:8b:0d:99:ad:69:ef:71:c3:
d6:06:3f:bd:24:2a:71:dd:eb:3e:08:0c:fd:91:a9:
83:ab:db:b4:96:fa:c5:cf:c6:73:98:cd:3f:1e:1b:
da:cd:d8:32:eb:7c:a7:c3:13:42:ea:20:a9:89:74:
6b:98:ce:c8:d2:f8:ed:ff:16:dc:5e:c3:93:e8:c7:
5a:08:66:5a:7a:3e:49:4a:92:4c:bd:22:1b:53:89:
26:bb:4c:79:91:0d:6a:bf:c8:68:f0:5d:3b:db:79:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.48.0/23
Signature Algorithm: sha256WithRSAEncryption
43:75:57:37:9a:2b:ca:2a:79:a9:9d:32:6c:eb:ec:7c:e2:1f:
7a:1a:01:27:c8:57:5f:02:9e:4b:05:9c:d1:8b:f8:2f:9d:c1:
30:c0:38:53:ad:93:49:e9:6d:18:1c:c5:68:1a:71:93:e3:9c:
6c:bf:ce:6f:96:48:20:26:97:10:b2:4a:98:c6:b2:83:96:70:
93:ea:32:01:b6:c5:99:24:45:b0:98:f6:65:a6:c0:e5:af:ff:
9c:07:eb:7e:1e:bb:6f:85:ec:ec:14:d3:17:25:89:09:09:f0:
a9:d2:f8:46:85:cc:6d:e5:d4:f0:6b:c4:c6:9f:a1:f5:87:3d:
ef:47:67:a2:8d:4e:89:4d:d4:87:72:42:bd:e5:58:79:a1:cf:
3e:68:a3:51:de:68:64:38:06:1f:b2:f0:a7:f8:27:dc:c6:dd:
5e:14:03:9c:68:11:70:76:12:e7:46:1a:a1:4e:5a:63:60:56:
f1:ed:d6:d0:1a:de:06:00:7b:62:59:62:77:41:a0:7a:7d:e7:
91:d7:be:ee:d9:dd:24:89:c3:1a:2d:8b:b1:53:2a:0f:09:fe:
b9:65:4b:bc:63:9b:4c:1e:8e:b4:4a:49:47:be:49:a1:76:f3:
cf:4f:de:37:9d:d5:05:de:43:b6:bc:3b:81:fd:2f:55:01:6b:
dc:c5:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:19 2026 by rpki-client