Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
File: hRn_LGgILMZHuCh2C0t7FJXshMs.cer (raw, json)
Hash identifier: uAaCc3JmaDmR0hdaRK4BKuVzltGAqKIqM5iKgC2peI8=
Subject key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82D0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Sep 2026 13:29:48 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 146.19.9.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 05:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33488 (0x82d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 28 13:29:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:c6:7f:b8:bf:dc:7f:20:4b:e0:11:73:61:
ed:39:e8:82:25:a5:70:b9:07:7d:19:4c:88:99:38:
a0:86:b3:eb:c6:19:ca:01:8e:c3:f2:3f:00:db:63:
b5:cb:4b:af:a7:04:5c:5e:0e:d2:c3:ac:40:24:46:
c8:32:2d:c3:a1:00:37:3d:82:b4:ec:b1:aa:f9:2d:
9b:fe:26:03:bc:dc:a8:42:a7:c8:1c:f6:e0:5b:a2:
7f:04:e2:14:b8:7d:23:f2:10:56:94:42:ba:c4:fe:
52:c2:c7:cd:5e:f6:30:ab:4c:ac:75:d1:88:22:bd:
4c:b7:e4:10:e0:98:83:ab:23:80:b4:26:d6:bc:4c:
75:98:e7:e6:0a:51:02:66:b4:a2:40:da:c7:9c:06:
c7:11:bb:71:8d:1b:61:d5:31:3d:35:49:41:2b:e0:
b3:fc:6a:e6:5c:df:53:0a:ae:74:02:16:ab:0f:da:
e3:4e:08:ee:00:24:77:5e:7c:bc:eb:96:1d:87:32:
72:8f:53:9b:a4:6f:8c:5f:99:00:38:46:0e:e8:32:
f5:99:ac:49:d0:eb:08:7a:35:91:de:a4:95:09:89:
3d:5d:d7:41:62:2c:9b:98:e9:d0:40:88:41:80:1f:
21:52:df:22:82:73:75:63:3a:ad:77:96:02:4c:c6:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
27:48:08:0b:38:72:37:c8:13:53:9e:79:bd:8b:b1:53:c4:ce:
4f:eb:e7:47:7a:52:9a:c4:f8:e1:23:16:e7:05:2e:88:86:1d:
d0:92:a0:f0:5e:13:9b:34:22:c9:49:21:b6:3c:cf:34:e4:2f:
1a:10:6a:4d:aa:06:e9:88:c2:7c:63:f5:11:65:a2:df:f6:7a:
fc:d5:3b:eb:af:b9:ee:91:a9:0b:7f:2f:9e:09:6e:b0:ca:d9:
4b:69:18:95:2a:f4:ab:79:31:1f:75:95:30:ad:1a:46:8e:b6:
02:9c:c6:eb:e5:6f:78:8f:d0:92:59:b0:ae:97:d5:03:5a:fd:
54:7e:4e:e5:88:9a:71:5a:b9:4d:48:1a:10:99:8a:ca:b5:31:
f8:d5:53:7b:53:d6:dc:b3:ca:ff:04:29:1a:3f:b3:18:86:d8:
1a:c2:6b:10:74:44:b7:15:e7:40:c0:0a:0f:cc:50:e1:64:20:
36:10:3a:df:36:16:02:e2:aa:63:03:34:87:c8:a0:7e:d3:de:
e8:f9:a3:5c:cd:7b:3b:b1:49:37:6f:3d:c5:ce:d7:5a:43:38:
22:3a:36:18:7e:5d:93:a2:99:1a:f4:9a:82:3f:16:9c:6a:63:
cc:59:95:4f:4f:f6:3c:3e:31:0a:df:47:7f:1c:3a:51:e8:f4:
70:93:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:59:12 2026 by rpki-client