Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
File: GHWJdndWd8NAIPDun97Wlit4ol8.cer (raw, json)
Hash identifier: RHHlLt87JuA4b7bHZ7FuxQuN+e9EkBZLkXIzUw1oEfU=
Subject key identifier: 18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Aug 2026 12:02:21 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 66.234.160.0/20
IP: 207.136.0.0/18
IP: 207.158.64.0/18
IP: 216.118.0.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33021 (0x80fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 19 12:02:21 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91448CB, serialNumber=18758976775677C34020F0EE9FDED6962B78A25F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:3f:9c:63:df:06:7e:0a:33:2c:37:ce:70:
d7:24:23:ef:a2:ff:de:a9:1e:a7:66:44:41:11:0a:
be:61:56:21:d9:a5:ff:56:2a:d0:ec:d2:dd:8c:ee:
29:88:88:24:40:a9:d4:48:20:f8:b5:85:ec:14:52:
ce:d2:46:68:6e:b4:bc:ab:8e:41:7c:d5:c7:64:31:
38:08:a5:1a:4a:6e:39:2d:e1:35:2a:d4:10:ab:e3:
50:b1:d6:45:d5:99:47:6d:5c:79:c2:27:c4:e5:7e:
0c:5b:6c:3d:cd:dd:b4:8b:d1:8a:59:85:c4:bf:fe:
cc:ff:05:a6:14:0f:e8:8e:c1:0e:0e:c4:37:0e:0d:
b0:49:29:31:c8:93:66:55:00:66:cb:62:b5:1a:b2:
bb:b5:93:fc:d7:d7:81:38:42:f6:72:70:a2:dd:d7:
0b:8a:82:ea:31:73:b5:39:a3:a1:14:88:a8:62:69:
70:2c:7e:15:82:ee:c5:cd:82:6c:b5:ce:32:82:6e:
bb:3b:e5:69:8c:e9:47:e4:40:eb:2a:44:fa:6b:56:
9d:bc:a9:ca:f7:54:ad:92:8a:a0:0d:07:d7:85:be:
1a:ee:5d:e0:76:27:fb:70:02:15:61:01:7a:52:02:
ab:de:e2:2d:5e:25:27:0d:6e:c9:b1:a0:aa:cc:01:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.234.160.0/20
207.136.0.0/18
207.158.64.0/18
216.118.0.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:c6:f3:0c:fc:b1:e6:c4:d8:f3:c2:4f:49:02:50:ed:17:70:
be:0e:c0:1d:d5:e7:20:9e:c8:84:e2:58:1d:b7:44:66:25:d7:
08:69:89:14:26:4a:78:04:89:2e:f6:ac:e4:95:1e:76:56:69:
73:1c:be:55:78:aa:09:40:b1:41:82:16:c5:d4:b0:0b:78:66:
9c:27:68:ca:ec:c8:cd:f2:14:f4:a2:57:47:05:8e:a2:f0:5c:
75:2b:9f:c7:a0:be:36:ec:a9:f0:d3:55:e9:62:43:7c:48:b1:
3f:0a:5f:36:48:9b:e2:76:b6:3e:20:43:09:1e:31:e1:e0:fd:
52:37:37:b9:3c:38:93:a1:8d:01:ab:2e:41:cf:f6:c0:22:04:
ef:04:2d:5e:d4:07:f7:10:a1:50:0e:d0:f7:ca:d6:de:6d:be:
26:6a:7c:d3:9b:2b:29:71:5f:80:1d:f6:2e:1c:c9:18:a8:5e:
05:5f:a5:93:fa:1e:e7:7d:d9:32:6d:60:44:50:5d:ed:96:02:
75:69:91:32:34:3d:0f:42:67:e9:e4:0b:c4:5b:a6:48:4a:99:
62:db:62:80:36:d1:79:d6:30:dd:a4:9d:e5:17:3c:ea:27:37:
08:71:d3:63:8b:b6:16:da:6a:3d:5f:40:74:6c:fd:77:ea:b4:
27:9d:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:14:55 2026 by rpki-client