Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer (raw, json)
Hash identifier: aIPUaVO/ZJ/jRkECufMEfD++ySkoEKufkZA7IkXOaFs=
Subject key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Jul 2026 13:03:18 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 167.179.26.0/24
IP: 205.209.31.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32394 (0x7e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 9 13:03:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:a5:40:ca:60:69:9b:a7:c8:ae:4d:30:8d:
6f:32:0a:2d:0f:33:a6:e3:56:50:4c:58:29:58:9d:
e7:c4:5b:ee:d9:a6:22:29:cf:f4:09:44:b8:5e:5c:
bb:8f:a2:a5:90:a3:c4:a7:3b:1b:f8:74:2d:44:3e:
af:d4:4b:7c:f6:ff:b5:8c:ad:72:f2:fc:3b:ec:d2:
af:c5:5a:31:76:ab:c6:3d:e3:3e:46:13:91:80:f7:
be:2b:76:e3:95:ed:60:e3:78:6f:5e:c8:eb:a1:bf:
cd:9e:d8:b4:6c:74:f5:2a:e6:da:cb:dc:71:0e:29:
ce:b7:37:3e:d6:97:9e:85:2a:62:5c:06:1b:d5:09:
fe:7b:0f:ba:f1:49:e3:58:11:b7:10:37:7e:4c:71:
b4:16:b3:8f:0c:d2:bc:e9:a9:30:91:15:cd:71:a7:
8c:c8:4a:ec:47:74:27:5f:9a:46:c0:10:69:53:da:
00:01:ce:49:00:a6:2f:40:9b:de:e6:08:7f:6c:e1:
f7:a8:22:f4:d1:c8:43:7e:37:3d:ff:f6:d0:29:8c:
28:b7:91:bd:7b:99:49:dc:b5:45:73:0f:92:79:ff:
c4:23:29:11:93:2b:31:8b:06:e6:59:ea:86:9c:c0:
3d:bb:a1:67:dd:97:43:30:a4:ce:4c:fb:f5:1e:99:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.26.0/24
205.209.31.0/24
Signature Algorithm: sha256WithRSAEncryption
78:18:fd:e9:ae:a5:ff:ce:31:f5:1d:ec:13:23:10:5a:51:91:
8e:6c:ac:76:62:dd:4e:89:1d:77:e8:a3:79:84:0a:d0:d9:a8:
d9:3d:5f:09:7f:ab:f8:cc:fd:c7:96:c4:c4:7c:e0:1c:0f:ee:
af:0b:83:f2:0e:15:48:0e:2c:2e:1a:62:fc:fb:ff:88:7d:0a:
2f:ab:d8:68:4a:be:3a:10:fb:96:5e:b9:09:e7:9c:a6:f4:8d:
77:66:9a:ae:2d:67:3d:0f:b9:e4:e9:ec:56:0a:d7:a7:1f:20:
3b:80:74:f3:83:86:e9:24:db:0c:1d:24:f7:55:b7:33:f1:a7:
c4:1f:91:d4:d1:d0:a4:50:12:d6:ae:4a:e7:97:c8:0e:53:d0:
d3:d1:e1:a2:f6:23:88:e2:1e:ea:56:eb:b9:9c:54:63:7f:a5:
09:4f:57:69:37:61:c6:2a:0c:66:32:29:ce:b5:90:31:0f:38:
76:8e:7c:ed:cb:8c:38:ab:af:ae:01:4c:2e:a8:c0:fe:6c:c0:
3e:b8:5b:46:29:f8:f2:be:16:66:a8:48:55:bd:d9:42:0c:e4:
4e:ea:7f:05:9b:b2:d9:3d:ef:2f:e3:6f:6b:71:3d:25:9d:a9:
51:32:50:2a:03:b8:13:26:60:cf:2e:d7:aa:11:fe:98:7b:d4:
67:11:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:57 2026 by rpki-client