Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer (raw, json)
Hash identifier: pks8bA79QoCZwnSWyj+P8spo1JdAaZGE4mHEMSk5lpE=
Subject key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8256
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 12:52:18 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.113.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33366 (0x8256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 16 12:52:18 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:cf:42:84:f9:4a:c6:bb:36:4b:2c:0e:01:
0d:79:1c:7b:07:eb:68:86:62:e0:63:59:df:26:2d:
fc:85:9b:78:66:f5:61:31:f7:54:ce:65:33:34:e5:
aa:08:ce:b2:68:0d:7e:6c:77:04:1d:71:5a:1d:dd:
dc:6f:40:c6:2a:64:0a:b9:3e:b9:3f:4a:c4:1a:ad:
7b:90:3e:41:6a:10:1f:64:44:13:ac:7c:5d:4a:fd:
cd:51:82:88:6a:69:81:5d:53:cd:80:73:77:22:e2:
57:15:66:82:32:ad:7d:9f:02:7a:98:91:99:ba:c3:
08:6b:84:ea:ad:e7:4d:6d:47:49:d9:2d:0f:95:8a:
01:7a:5e:77:9b:e9:ac:60:cd:5b:0c:86:3c:30:a1:
d7:d9:5a:f2:5a:4e:de:5c:e6:d1:31:50:ce:4e:b5:
b2:91:4c:98:21:10:d6:67:d3:09:e9:f5:bb:0d:a0:
99:15:81:71:9d:a3:a7:b9:6b:11:fc:96:88:9c:d5:
2c:c2:37:81:4c:94:02:0b:95:b6:4d:4b:9b:21:c1:
1f:2f:e6:6a:94:4b:a7:c1:2d:d9:d0:9d:30:1b:78:
0e:95:1d:07:12:83:bf:21:a2:f7:cd:12:bd:04:e3:
23:8c:d1:74:9a:70:00:0c:77:37:3d:96:78:9d:30:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a9:45:88:f4:8b:fa:ef:44:88:7e:89:56:b1:44:75:69:fa:
3f:32:3a:31:77:74:35:9d:20:0a:97:49:bc:27:2c:80:7a:1c:
78:60:fd:7f:55:d8:66:55:23:f6:b2:5d:ba:81:54:7e:29:a1:
9a:7e:df:9a:31:b1:83:1d:40:5e:f0:d2:0e:1f:00:42:55:8b:
0b:81:b0:fa:8d:84:0d:e3:de:3c:58:48:81:14:6a:98:f9:20:
a3:a0:b0:1a:75:08:00:98:65:0e:11:9c:60:5f:51:37:b7:30:
ce:d3:b5:66:42:cf:c7:e9:89:d0:03:9d:72:a9:3b:82:e2:a1:
6a:02:74:14:86:29:ec:80:f2:c2:00:32:8e:29:b9:47:ed:16:
a5:1a:84:61:db:2a:e8:db:94:db:73:31:21:80:9a:e5:2e:90:
c7:c9:51:f1:1a:b7:3b:48:de:8e:0b:db:b4:60:a7:fe:9c:e4:
41:67:a5:b1:d8:24:da:83:6d:d4:91:24:14:f0:1f:d6:ca:6b:
c2:12:6d:ea:a9:4b:0f:3d:10:69:89:72:ef:62:fa:8a:12:7c:
a5:9d:e3:55:12:7b:d6:ed:90:5a:d4:18:d8:ff:73:67:9e:01:
58:9c:b3:d2:da:d1:c5:41:ba:b1:08:02:14:3e:7f:42:99:4c:
8b:22:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:51:37 2026 by rpki-client