Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
File: 38k2Rbnm9TdyUHTptErqgKn1YIg.cer (raw, json)
Hash identifier: pVYjBhsahmhrpuv8By3HXMSTLDlks2MqM4C681BiFSk=
Subject key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5521
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 09:45:17 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 79.109.0.0/24
IP: 79.109.2.0 -- 79.109.223.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21793 (0x5521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 1 09:45:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e4:74:b3:68:c4:78:d1:ed:c4:56:f1:32:89:
5e:ed:44:da:33:ad:f0:a0:ff:8e:af:b0:16:13:e1:
7b:87:e4:e2:52:4d:5d:e2:11:e4:e7:b8:ae:12:87:
3c:a8:5a:18:6d:5d:4a:43:a1:8e:f7:09:52:19:01:
6c:f6:f0:61:dc:9d:a9:9f:09:a4:25:1c:7b:85:a9:
41:e9:89:50:f5:dc:f1:9a:4c:b7:ef:55:8c:d9:8e:
ef:07:5d:2d:d1:bb:12:a8:4b:8b:d3:56:5f:94:6f:
7f:1f:a3:92:be:16:bb:41:6a:57:45:f6:1a:c7:74:
54:17:cc:ec:cd:9b:38:2f:13:e4:49:e3:eb:72:99:
d8:23:ba:2e:8c:a7:ae:f7:69:18:db:17:86:80:91:
78:43:5e:c7:78:bd:6f:5e:6f:18:bf:ce:5f:6d:02:
7a:64:4d:87:c9:3b:93:39:e4:7b:4d:0a:63:40:16:
cf:84:b7:05:00:1c:94:56:8d:9f:7c:5b:55:70:03:
1d:1e:0f:fe:41:bb:44:32:e3:6b:f4:34:8a:1b:11:
71:92:56:36:87:76:3c:63:70:6e:96:9e:14:fd:f8:
b2:75:55:dd:be:9f:92:59:21:77:12:da:1e:0f:3e:
fa:13:56:ee:c9:48:dd:6a:5e:d4:81:13:4a:36:3a:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.109.0.0/24
79.109.2.0-79.109.223.255
Signature Algorithm: sha256WithRSAEncryption
1b:b6:94:ab:62:d1:19:63:2d:10:98:2f:04:3d:56:13:eb:15:
03:77:c7:e0:c1:51:14:d2:c6:8f:97:d8:19:09:0c:a9:68:97:
e7:99:f4:1d:f2:fd:4b:33:82:b6:df:80:2e:ce:dd:df:2f:fc:
12:05:74:a0:f4:ec:7f:e9:14:e7:7b:42:ef:9a:c6:be:44:58:
4b:05:88:8a:93:c3:50:9b:6b:dd:a1:0c:95:e1:2c:d5:84:61:
b1:22:f6:f4:bd:21:b6:ae:9b:bf:0a:93:60:c4:9f:06:2a:84:
52:2e:c1:03:f7:b6:ba:5f:55:b2:af:5e:e8:ad:fd:ff:07:62:
34:f1:52:b3:ca:ae:d4:96:8a:bf:34:69:51:bd:c8:8b:da:6a:
53:fc:57:ea:df:68:83:f1:db:fa:4d:bd:7a:ce:7b:02:c3:06:
d8:25:3f:79:97:2d:27:7e:65:58:bd:6b:97:d8:f1:d9:59:57:
11:83:ea:ce:e0:8f:34:41:38:45:56:c6:1b:13:e5:54:a7:38:
01:af:e9:fc:6f:c7:70:06:2c:22:57:9a:b8:4b:20:23:ed:5a:
10:05:a0:73:e4:a7:c1:8e:63:f2:33:38:37:69:01:05:99:60:
7e:1b:44:b7:b5:24:04:ad:4c:62:54:8f:bb:cd:ef:d1:db:24:
9b:12:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:03 2026 by rpki-client