Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
File: L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer (raw, json)
Hash identifier: a4YyJ2HZR9R1JNVQMfa+gEwpZBz2cJuYZX68O8OPnts=
Subject key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Sep 2026 07:36:42 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 138.252.90.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33498 (0x82da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 29 07:36:42 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:a6:f6:1e:19:3f:e2:5d:c4:2d:07:47:90:
9d:e7:70:9c:e9:82:ba:63:67:bf:18:e6:11:4c:3a:
c8:5d:c9:77:b9:95:29:3e:45:35:d6:2d:cd:b4:ab:
72:f0:d1:11:db:ce:87:11:d9:7f:8b:09:f2:a0:50:
74:e8:9b:48:b8:e7:69:c1:2c:c3:6b:64:38:55:48:
bd:ed:97:0b:0d:60:9d:8f:d0:fe:e3:91:bf:35:a8:
a0:f6:e3:93:c6:65:63:14:a3:60:c7:ef:a1:75:f9:
13:de:52:d6:35:e9:54:47:e1:d7:75:1d:c2:3f:68:
47:a3:6b:73:bb:bf:da:0d:6f:42:75:49:59:2a:db:
b1:42:0d:db:18:70:a5:53:84:34:a4:37:f1:25:cc:
89:08:bd:f2:b5:3f:cf:6a:f0:9f:05:7d:18:04:8e:
d2:4f:45:0a:78:6b:70:1f:b4:d9:fb:6c:6a:41:21:
67:55:73:70:61:67:04:7a:2a:ce:81:7a:9f:e1:fd:
cf:38:71:46:64:d1:ae:ca:6a:8d:54:f7:88:41:84:
36:26:82:ab:11:c5:97:45:f1:62:e1:9f:a6:ff:50:
b1:b1:ef:69:e6:69:e0:5d:92:68:86:16:58:e8:2f:
21:54:f6:89:83:96:34:d6:14:8c:bc:02:76:c4:e1:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0f:06:38:17:6d:4f:52:b4:39:fb:c9:0f:4b:2b:ee:63:a9:
36:ee:ab:ef:13:ac:c7:cc:d3:d0:bd:15:bc:b5:c4:5d:a1:48:
29:bb:52:34:62:00:15:1c:c7:fc:fb:df:eb:1e:d5:73:65:6d:
70:58:da:84:97:b9:e0:c9:af:f6:34:59:2c:84:79:39:0c:af:
4b:90:a0:da:2a:f8:43:dd:f1:4b:2d:f6:bc:06:bd:a9:d0:e9:
19:92:c7:b1:58:37:43:66:30:cc:a8:fe:2a:8f:cf:db:82:85:
12:b4:d1:50:83:ff:a0:07:cd:30:8b:5b:63:63:94:56:b9:bb:
20:b2:94:4c:cd:98:77:c0:7b:ad:1a:5c:49:3f:55:9c:66:bf:
e6:7f:87:60:47:29:4e:ea:0f:c6:ee:f0:74:c2:07:99:cc:9c:
39:78:62:1c:d3:2a:ff:86:8d:24:06:31:1c:3e:13:cd:0c:cc:
1a:53:ac:ba:57:5a:d1:a2:41:a2:af:b6:78:f3:c6:6e:ee:05:
9f:4f:47:56:0e:cc:34:2c:a2:76:4a:76:f8:e8:1c:29:03:4d:
e7:49:9c:32:82:c4:48:74:07:ef:e8:c5:98:90:97:22:44:3d:
38:1d:21:e8:c7:e3:78:9b:ec:b5:ee:c9:a3:8b:31:dd:e1:8e:
53:71:1b:c5
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAILaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDkyOTA3MzY0MloXDTI4MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODA0OUQxMTAvBgNVBAUTKDJGNkJDQjVDNUVCRjczNjczNjY1Njg0
NEIxMTZDNDhEQTU1MTEyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3GKb2Hhk/4l3ELQdHkJ3ncJzpgrpjZ78Y5hFMOshdyXe5lSk+RTXWLc20q3Lw
0RHbzocR2X+LCfKgUHTom0i452nBLMNrZDhVSL3tlwsNYJ2P0P7jkb81qKD245PG
ZWMUo2DH76F1+RPeUtY16VRH4dd1HcI/aEeja3O7v9oNb0J1SVkq27FCDdsYcKVT
hDSkN/ElzIkIvfK1P89q8J8FfRgEjtJPRQp4a3AftNn7bGpBIWdVc3BhZwR6Ks6B
ep/h/c84cUZk0a7Kao1U94hBhDYmgqsRxZdF8WLhn6b/ULGx72nmaeBdkmiGFljo
LyFU9omDljTWFIy8AnbE4RvbAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUL2vLXF6/
c2c2ZWhEsRbEjaVRElkwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwNDlEL0FCNjZFMDkyQjJDNjExRjA5MTM0QkE2REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDQ5RC9BQjY2RTA5MkIyQzYxMUYwOTEzNEJBNkRDNEY5QUUwMi9MMnZMWEY2
X2MyYzJaV2hFc1JiRWphVlJFbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACK/FowDQYJKoZIhvcNAQELBQADggEBAJoPBjgXbU9StDn7yQ9L
K+5jqTbuq+8TrMfM09C9Fby1xF2hSCm7UjRiABUcx/z73+se1XNlbXBY2oSXueDJ
r/Y0WSyEeTkMr0uQoNoq+EPd8Ust9rwGvanQ6RmSx7FYN0NmMMyo/iqPz9uChRK0
0VCD/6AHzTCLW2NjlFa5uyCylEzNmHfAe60aXEk/VZxmv+Z/h2BHKU7qD8bu8HTC
B5nMnDl4YhzTKv+GjSQGMRw+E80MzBpTrLpXWtGiQaKvtnjzxm7uBZ9PR1YOzDQs
onZKdvjoHCkDTedJnDKCxEh0B+/oxZiQlyJEPTgdIejH43ib7LXuyaOLMd3hjlNx
G8U=
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:51 2026 by rpki-client