Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GGP4WYlB9vJn4sbGbHOjbiOYrLg.cer
File: GGP4WYlB9vJn4sbGbHOjbiOYrLg.cer (raw, json)
Hash identifier: bucZVCj7uE5TEQ1vkNCq3ucvUWhN09hktFLUPl2h8xs=
Subject key identifier: 18:63:F8:59:89:41:F6:F2:67:E2:C6:C6:6C:73:A3:6E:23:98:AC:B8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Aug 2026 03:14:24 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 192.207.120.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32979 (0x80d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 17 03:14:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9130B5B, serialNumber=1863F8598941F6F267E2C6C66C73A36E2398ACB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:e6:bf:ea:09:f8:ec:6f:3d:bb:24:4d:f5:
d3:65:bd:88:bb:83:aa:bf:2a:64:2b:06:7e:13:aa:
7f:43:8c:4f:74:3a:ab:84:5f:d6:49:01:c6:d8:76:
30:fe:18:02:46:13:56:53:62:55:66:d1:32:09:f5:
62:93:dd:16:dc:86:35:a1:44:ba:87:9b:ad:1c:9c:
34:7d:b5:02:32:77:0c:0d:9a:92:cb:24:3f:28:2d:
2c:fc:d6:08:4e:dd:49:9c:17:a7:88:e2:7c:97:2f:
f4:36:6a:af:c4:d3:4f:f7:de:5b:82:20:0c:34:9e:
da:3e:2c:39:33:a3:f6:76:74:87:a9:21:30:17:82:
e4:e9:f4:e8:35:91:a0:d7:c4:dc:a2:2f:6a:be:21:
c8:6a:db:52:59:b8:1e:cd:28:b3:6b:0b:0e:15:fd:
2e:f6:b8:d1:5c:de:ff:78:be:2d:ff:ef:5f:56:02:
79:b2:3f:33:78:30:c4:55:d3:d2:39:00:cf:34:d1:
89:5b:db:b5:66:6e:cc:8a:8b:86:63:16:c6:df:7b:
48:60:cc:e9:66:26:b8:b5:cb:aa:22:3e:59:d5:a0:
d4:4e:21:5d:91:8d:13:e0:b4:6b:fc:1e:44:e2:a3:
a4:80:fb:a1:78:ff:16:90:87:26:65:15:2f:e0:58:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:63:F8:59:89:41:F6:F2:67:E2:C6:C6:6C:73:A3:6E:23:98:AC:B8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.207.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f9:c2:92:50:0a:f3:85:e0:ee:08:4b:33:58:ef:a2:b8:1c:
43:69:78:7d:8a:f9:12:d3:df:49:1e:fd:af:36:57:46:d4:df:
a8:5d:e0:33:b7:fa:a9:e3:44:e2:0c:fd:f9:e7:a5:ae:5c:3c:
26:03:93:a7:29:54:47:26:2e:e8:43:1c:e4:57:e6:3f:fc:25:
a5:59:ac:68:2a:3e:65:9d:86:f4:a9:8c:4d:a1:f8:ce:e7:04:
fe:bf:c9:6d:d2:80:ed:28:94:4c:3b:62:9d:20:32:8f:3d:ad:
42:c4:e7:2f:b7:9c:2e:0d:4c:08:d6:7e:30:95:eb:04:ab:e4:
93:45:1f:40:4b:ae:44:6d:13:28:97:c6:42:4f:79:7d:37:07:
60:e6:57:2c:7d:ea:10:e2:b6:5f:08:e4:08:56:9f:90:cc:8b:
e3:4d:ca:f8:78:9e:ab:93:e2:29:a9:cb:82:06:ac:14:f6:25:
17:a6:ed:82:65:69:aa:71:03:f4:fd:8a:e9:3a:72:d9:3b:52:
fa:b1:2b:da:cf:dc:a5:02:52:e3:42:46:6f:55:4d:5d:a1:63:
ca:2d:d5:b6:62:fb:3e:d9:b8:ab:95:75:76:f2:8b:05:70:b6:
0c:3c:17:13:aa:97:92:9d:39:94:5f:33:00:d7:7b:39:7f:bb:
aa:67:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:15:52 2026 by rpki-client