Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
File: aMIYjATCDkkjq7YttIckmDVLSv0.cer (raw, json)
Hash identifier: IquuudFduClzRH88S67D6jRevd2maz5HCfS8J3cVsR0=
Subject key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F11
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jul 2026 08:25:41 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32529 (0x7f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 21 08:25:41 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:07:c5:41:ce:f3:7f:a7:21:5c:e4:39:e5:
32:29:e2:6a:d9:2b:db:ec:03:ec:57:e1:66:d9:12:
0a:33:40:8f:7f:b2:1e:47:a6:d1:ae:52:31:c8:98:
6d:69:4b:bc:f2:e0:b7:02:6f:8c:f3:d5:33:d9:4a:
70:0d:ae:c7:22:1f:8e:c3:8f:e9:6c:a2:c0:c0:3b:
ba:80:7e:13:d7:9f:56:50:3c:63:7a:e1:37:f4:f3:
c8:e0:a0:6a:83:97:59:2f:8b:14:1c:2a:8f:45:fe:
96:37:d4:fa:20:44:fe:a1:34:ca:1b:dc:78:0e:c6:
07:9d:72:7e:b0:f4:f7:38:c3:57:85:b1:c9:49:cf:
3a:1e:81:e3:a2:31:97:10:94:1b:25:9d:4e:be:c1:
47:84:8e:7f:fd:69:38:2c:8f:8b:d6:ea:e6:7b:c5:
66:99:28:68:06:4a:ea:53:11:67:d4:bb:db:d3:9e:
d2:f6:2b:1f:d1:3b:98:f5:e4:5b:89:81:12:f6:76:
39:2d:a0:cd:47:c6:fa:82:7f:26:e1:26:22:9d:df:
f6:eb:00:e8:7e:ff:42:20:78:55:75:bd:f2:95:ab:
b1:0e:87:6d:02:aa:51:9d:0a:57:fa:ac:78:c9:98:
4d:f7:1f:74:61:c9:94:a9:44:7e:c4:a5:a0:34:4a:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:14:2f:9e:1b:4a:3d:71:cc:bf:1a:c0:ef:cb:86:e3:df:3b:
7c:7b:dd:83:ff:f7:9d:85:ef:10:d1:c4:81:f2:47:e9:d5:7c:
a0:33:7e:c7:37:d7:fb:bf:98:60:26:ff:e7:bf:aa:a5:f5:a9:
44:a9:a2:d8:a6:84:e4:3b:d1:90:17:cd:99:b8:0c:d8:77:75:
f5:3b:f6:e9:47:05:72:b9:56:12:6b:1a:33:82:1d:16:f6:60:
8e:47:68:d2:6c:fc:4d:d4:55:96:cd:09:1a:46:bb:80:ff:ba:
91:7f:fc:6f:94:9d:e3:74:c1:8c:78:77:f4:e7:11:1c:b9:6c:
88:f0:90:65:d5:ab:61:c8:e2:69:12:ae:05:dc:99:86:ac:78:
ec:03:94:dc:e4:64:da:6c:fe:89:48:75:78:a0:de:49:07:d4:
2b:d9:ce:86:ae:f6:05:78:9f:55:58:45:80:c0:d4:35:fc:b5:
7d:cc:92:33:56:07:9e:e6:45:0d:42:1b:40:fe:98:5d:ce:b8:
aa:46:1f:a2:a4:b6:e8:82:ba:14:a7:df:13:ed:d3:e4:b1:3f:
bf:b7:fc:a5:e8:49:2d:b6:70:5b:5a:f1:3d:e9:84:84:83:3e:
7a:ec:3b:3c:9a:21:d5:47:45:3e:1e:e0:ff:29:e8:c7:27:57:
0f:73:de:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:25:42 2026 by rpki-client