Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
File: l8hXp1yabimLCaBh2PfOEHv50zM.cer (raw, json)
Hash identifier: Jlhuu6jCgvl+842wepMimAVVspv/y+/C2rckGuyRZQ4=
Subject key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 55BB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 Oct 2026 13:24:37 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 79.108.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21947 (0x55bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 3 13:24:37 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:0e:51:eb:97:ca:96:cb:aa:e4:9f:10:fb:
97:8a:fb:99:f5:60:dc:36:cb:57:15:ec:af:0b:e8:
f2:90:23:0b:f2:76:c1:a3:ac:42:80:6c:c3:76:6a:
d9:59:66:ab:b6:5e:14:73:38:ac:82:27:df:a0:ad:
5d:0c:43:98:1c:09:76:41:9a:f1:90:7d:3d:a8:a7:
80:51:36:94:42:25:a8:1a:8b:26:9f:eb:85:68:60:
2e:31:61:c1:f2:dd:97:08:93:c1:ce:50:00:9c:07:
51:26:8a:05:66:2d:fd:ed:df:bf:ea:88:5c:0b:b9:
25:4a:6b:18:d5:b8:8f:a4:c6:8d:3e:a6:76:fb:05:
cf:38:b3:21:48:af:1a:f6:e9:b4:6a:0e:31:70:0a:
b2:79:27:39:47:56:64:07:fa:8b:df:6e:f2:32:e6:
14:dd:4c:d7:c2:b0:0f:f9:27:93:34:20:f2:ed:27:
ba:9e:3e:29:ac:8c:6e:3b:37:98:23:64:d5:1d:d2:
41:f0:16:ac:ed:db:ef:37:3e:78:b9:27:2d:b2:52:
14:26:2b:2c:09:03:10:d6:67:57:6b:fd:38:0e:43:
7b:ea:09:03:8c:98:8f:36:df:11:53:a5:46:ac:95:
30:49:03:e1:8b:d2:c0:ef:f7:06:e3:66:59:b0:3f:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.108.224.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:83:e7:49:71:0c:a8:d7:bb:8c:cc:6f:e7:ba:ea:4e:76:0b:
de:8e:31:d4:16:73:56:7c:84:8b:b4:d9:9c:58:f2:6d:26:92:
19:25:80:3b:96:dd:0e:e8:d0:9d:2f:a6:b2:c5:d2:cf:ba:9b:
d9:76:da:ac:36:13:49:f7:ae:79:ec:d2:21:79:db:1d:ae:4a:
b6:cd:c4:e2:af:b8:a5:ee:a4:c3:f6:d6:77:05:45:e4:34:6a:
9e:b8:f7:99:9b:ca:71:cd:c9:b3:9f:6a:34:79:1c:0b:bf:bc:
9d:5e:df:fd:1a:bf:8d:49:4b:8f:46:8e:0b:ac:bf:c7:e9:b1:
20:c0:d0:0f:80:aa:49:1e:a6:e9:80:19:2d:b3:7c:bc:09:77:
cf:bf:6e:db:65:01:f4:4f:70:f0:c0:5f:f2:b7:36:32:4d:9a:
17:dd:75:9f:c5:d7:16:86:c1:c1:c5:af:7c:6e:9d:5b:19:d3:
ca:a6:c8:71:cb:53:3d:b2:85:1c:aa:28:9a:52:81:41:05:dc:
e2:25:88:58:6e:45:3f:c4:0b:89:b3:b7:e0:e0:8c:59:06:77:
4b:99:0d:53:94:6e:18:e8:aa:40:a2:0f:95:33:29:54:0a:ac:
b5:f0:65:1d:5c:dd:a9:f8:2d:39:3b:8c:07:06:6a:21:ad:26:
3e:b8:23:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:19:29 2026 by rpki-client