Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer
File: 4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer (raw, json)
Hash identifier: 3ctHkxWl1kv8xKD7CdyoxUeoDWFGgOmZWIlfBQxoiw8=
Subject key identifier: E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Aug 2026 00:59:33 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.102.92.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 14:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32944 (0x80b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 14 00:59:33 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91FF8C9, serialNumber=E2455320A7EE5FD08DB2EBB45C60F8871EFF696C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:7c:fa:e6:1a:db:1d:c1:36:26:12:8c:ee:
ff:0e:86:88:a7:46:7b:0b:18:e5:bf:67:f5:f9:bc:
8d:f9:00:44:e9:64:0f:4d:c5:fb:b7:3c:a4:44:77:
ea:aa:9c:fb:87:c1:78:47:b9:ae:90:14:c6:d7:ea:
0e:d3:7e:49:4b:e9:73:5a:52:6e:b0:d8:9c:bd:ed:
89:02:3b:2f:d8:17:fd:b2:c5:23:32:44:13:92:a6:
ad:6b:65:10:95:45:83:59:d6:01:0a:07:bd:ef:b1:
34:fa:b9:d6:3c:9b:98:3f:ac:ef:27:17:5e:49:4e:
d4:dc:c7:0c:0e:fe:ff:ba:a9:ad:53:ed:27:0e:42:
ac:fe:01:1d:24:fa:7c:c6:21:aa:db:8b:e4:ba:5e:
ba:2f:da:8b:be:61:d9:a2:49:70:00:a8:fb:5b:0d:
65:6f:cd:6a:80:4b:39:d2:6c:49:96:10:ec:ed:0b:
87:9e:62:2b:5a:3d:82:8c:98:ff:80:0d:69:5c:dd:
c3:ae:d9:ce:d1:ea:2e:ec:80:3c:d1:c3:32:82:5c:
09:44:12:85:2f:2d:07:41:21:e3:0b:21:e4:40:21:
27:c2:a6:4d:a9:56:fb:60:c0:e8:02:0b:7a:2e:e5:
cb:2c:b5:04:5c:18:31:13:e8:4f:e0:29:14:66:98:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.102.92.0/24
Signature Algorithm: sha256WithRSAEncryption
14:43:7c:cc:9a:c0:d1:56:f8:27:f6:c0:c3:4b:9f:5c:08:10:
07:5f:c0:5c:f7:43:e7:54:0c:ca:c7:b6:50:3f:ca:f0:b8:cb:
39:61:fe:87:71:7c:ab:14:72:cf:6e:d8:10:a7:45:53:5a:5e:
28:0b:4b:54:72:be:3d:4a:31:3d:a0:b7:16:52:aa:15:d8:f7:
15:db:b6:f1:7d:71:ea:9e:f9:65:2e:f9:af:6d:77:d8:7f:bb:
d2:78:33:64:bf:d2:3c:ab:f0:2d:d7:46:07:38:c1:70:18:0a:
bc:9e:7d:06:a0:18:2b:a8:dd:fd:5d:e9:3e:f9:94:06:e2:0d:
a9:53:ea:cc:3c:56:e5:0e:9c:35:76:6b:4e:d5:5a:47:43:de:
30:8b:01:92:a5:e1:44:73:a7:c1:cd:39:b8:e5:de:54:70:fb:
cf:e9:04:65:09:28:04:2a:32:29:04:0e:74:0a:be:72:97:8f:
dc:4a:26:d3:02:d6:ed:76:0c:ae:e2:2e:16:25:2f:58:e7:88:
09:bf:b5:2e:f8:14:41:43:3d:9a:c1:73:e1:3b:52:20:37:d4:
92:8e:31:84:5d:66:a8:35:21:aa:2f:b0:68:47:15:40:8d:d4:
a3:d2:f4:28:b2:8d:4d:81:25:9a:1d:cc:2d:c7:30:fb:04:31:
24:75:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:47 2026 by rpki-client