Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer (raw, json)
Hash identifier: n5EC5HkPMmITyUFNXrhUOhKnGlful0KaU+B9xN7rur0=
Subject key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 811D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Aug 2026 12:48:04 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.4.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33053 (0x811d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 22 12:48:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:a6:6f:cb:bb:04:98:66:35:0a:60:3b:24:
81:cc:06:3c:3f:69:3d:b6:ae:ab:a9:c2:9b:60:11:
a2:d6:a5:e8:8f:38:94:b5:6f:92:16:59:bc:01:22:
80:9a:93:d8:87:02:0a:f6:e5:fc:c6:47:6f:e5:f0:
8d:63:0a:3e:26:e1:58:b2:c4:b4:20:4b:5c:b9:a1:
09:a6:07:57:e8:10:31:2d:2f:2e:50:66:28:56:b6:
98:01:86:31:48:5f:df:bc:60:2e:ef:61:58:f3:b9:
f2:4f:95:9e:ea:b5:10:2f:0b:c3:9c:22:32:6b:a4:
b7:75:a4:bc:08:14:28:33:6f:3c:f5:a5:d8:31:ca:
cc:5c:2c:b3:b3:f5:e9:78:b2:ad:7c:98:b6:af:cc:
0f:ce:d5:06:04:e9:ff:8f:6d:02:97:b4:11:a3:bd:
aa:41:03:02:62:65:54:c0:48:f6:67:fd:57:46:03:
1c:06:58:2f:b4:49:47:43:da:2f:55:c3:5b:87:47:
c4:d9:3e:13:70:18:fa:e0:57:0c:f3:c8:8d:f0:31:
74:9d:a8:94:5a:7a:ae:52:53:a7:c0:b1:fa:5f:e9:
6e:14:ac:d2:e5:3a:e0:d9:99:f5:fe:3f:c0:ae:5c:
e5:d9:c8:6a:00:02:72:4a:a7:46:e8:3f:21:25:67:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.4.0/23
Signature Algorithm: sha256WithRSAEncryption
52:cd:60:27:72:51:e2:45:22:24:b6:d8:11:a3:29:be:a1:db:
82:3a:69:41:2a:f2:f2:ec:fd:63:3a:4f:56:9f:a1:cc:76:94:
00:18:74:dd:d0:1b:6f:7c:d5:fc:8f:e2:b1:53:4d:0d:51:a1:
a2:7d:1d:ad:e2:4f:5c:47:4f:88:37:cc:41:ed:06:d8:f6:fa:
be:76:ee:e9:32:69:fa:2a:4e:fe:11:7f:de:b3:13:cf:b6:71:
70:0a:d8:a3:fd:a2:57:ed:4d:18:fb:67:6e:c6:ab:48:f5:c0:
80:78:6c:23:4c:d5:3d:9e:64:54:ba:52:07:88:f5:d0:c3:54:
a5:c7:b7:20:21:3d:d5:32:9c:0d:30:43:2a:ab:9c:22:40:36:
e9:79:32:b9:66:f0:3d:12:11:8e:08:37:7f:8e:0a:33:a9:b1:
ee:a0:7a:48:cf:28:ac:38:dd:ba:a5:9e:68:8a:d1:ec:be:50:
b1:d6:a8:14:f1:ce:ec:8f:ca:29:ab:03:16:f0:95:cc:0e:3b:
2e:57:35:e0:05:82:13:67:f6:e4:60:62:da:b9:ef:7d:10:c7:
07:84:f2:97:2c:77:fa:1f:97:08:4f:b3:4d:da:c1:b8:56:94:
7b:d5:6d:ba:8d:d4:e5:3b:20:24:fb:2d:3f:2b:ea:cb:f1:27:
15:78:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:57 2026 by rpki-client