Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
File: ZhNNob_trAyRnSax9_nhaK-dK04.cer (raw, json)
Hash identifier: MPnk1lJwDeV6uFZthx/P3OIfoy3FN/J+cc+3x2dsdpU=
Subject key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8238
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Sep 2026 12:33:06 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 143.188.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33336 (0x8238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 14 12:33:06 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c8:f6:8a:f9:b3:84:89:f4:ae:e5:a6:1b:61:
23:2e:f4:54:7c:7d:19:1a:38:93:6c:02:b1:35:c5:
bd:13:20:0a:f7:68:10:fd:ab:d3:31:e1:64:ce:f2:
cb:64:aa:f2:9f:35:3d:29:bc:f8:10:60:35:1a:67:
41:d8:3e:e4:bd:76:1c:f3:62:f8:77:62:ba:31:19:
14:50:ee:6d:3f:53:2c:5a:f2:e3:33:ee:b2:95:1a:
db:a8:f7:28:ca:28:88:96:a9:a5:0e:de:0b:41:66:
4f:c9:72:0e:7f:a0:1b:8c:a9:ba:41:04:c7:13:e2:
7a:51:37:f1:37:bf:45:5a:a2:16:26:80:8d:1f:60:
63:e6:54:97:eb:0e:38:e0:a7:df:3b:c7:0c:22:78:
f7:48:85:6c:f5:cd:55:48:a2:0e:60:d6:4a:0e:29:
22:9a:f6:76:a4:38:ce:d2:b7:da:45:75:d9:29:10:
c0:5d:87:54:2d:a8:2c:0b:77:7b:7b:c3:7f:0e:ec:
4d:9e:f6:e3:a1:59:75:c0:16:49:fa:24:94:5e:c2:
b1:33:b7:03:ed:56:26:f3:be:c5:67:dc:fe:77:31:
f8:77:6b:d1:d5:d7:4c:d6:4c:37:e3:8a:4d:be:16:
fc:21:3f:f4:c7:7f:48:78:a4:31:8a:1b:fe:b0:e1:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.188.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:17:ea:80:0e:bd:b3:ab:52:dd:f7:22:36:6e:17:66:75:6b:
2b:59:af:2d:63:66:69:6a:e8:dd:5e:ba:42:d4:99:6d:67:42:
52:1a:15:35:59:e9:be:7a:62:a0:a6:ab:3a:ae:8d:0c:6b:cf:
fb:7d:86:ae:ea:fc:da:af:03:8d:dd:2b:90:77:3f:c3:11:53:
2b:91:95:fa:12:1b:61:ca:b4:cb:5a:af:45:86:37:42:08:99:
e9:18:54:aa:74:32:50:d5:4e:04:42:7f:0d:32:03:24:9a:58:
a5:fc:ae:d0:4a:11:0e:58:3d:54:85:16:90:6d:0a:00:ff:c4:
95:4e:59:f2:e8:a5:83:08:c1:2f:62:d4:94:09:6f:45:64:3c:
c8:36:ec:a3:a9:da:f0:bc:14:fb:77:2f:11:42:9e:a5:fd:4e:
ea:f9:3e:ba:13:a4:cd:09:82:08:0e:f7:7b:5b:a0:92:8a:25:
a2:ec:21:ee:d4:e4:dc:57:07:94:49:47:96:a9:63:ec:17:18:
46:64:bf:01:ec:68:67:1d:04:a3:77:d3:3e:d1:f4:9d:89:21:
a2:2f:e2:72:8b:64:60:8e:75:89:d6:60:82:bf:ef:27:7d:c6:
c1:4d:d1:99:51:5d:7c:a6:1f:84:4a:f8:e8:56:de:f2:25:56:
d3:12:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:20:18 2026 by rpki-client