Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-gfY04l5olzmJndVfFB_kR8cAs.cer
File: _-gfY04l5olzmJndVfFB_kR8cAs.cer (raw, json)
Hash identifier: +PEFf9HSWF6Z1kacSi5QlngWZQntOfa4saCDMeLtV0Y=
Subject key identifier: FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8192
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Aug 2026 04:57:04 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.98.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33170 (0x8192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 31 04:57:04 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A913AC62, serialNumber=FFE81F634E25E689739899DD55F141FE447C700B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:06:1f:7a:ad:0d:ef:43:63:56:7a:09:1e:
30:57:c5:5f:ed:a1:46:3e:6f:ef:25:c7:85:f2:43:
af:17:d0:9b:e5:e1:08:11:6a:66:05:41:ea:7d:5f:
cf:59:a7:98:27:b9:3b:75:85:7a:54:7f:0f:82:9b:
6f:06:cb:f4:51:14:6e:53:fd:5b:d0:6c:5f:b0:62:
0a:ea:12:82:8f:18:e3:bc:5d:3e:59:38:5c:75:5e:
23:ff:b2:6d:60:fb:ac:c9:b9:a8:f3:e2:30:bc:d3:
77:e7:e7:51:e3:26:99:95:61:f7:61:7e:1a:1b:cd:
7d:da:af:d5:c7:c3:c7:67:22:e8:06:4d:b1:ab:b2:
1a:3b:6e:0d:07:df:62:ff:b5:f8:c6:a7:12:af:b2:
c4:cd:69:38:11:c8:e6:46:00:4a:90:1b:70:a7:5d:
14:4e:f6:2c:8a:0a:7b:c6:74:f7:fc:bb:cf:ee:b7:
b9:f9:9b:68:b8:9b:ee:c8:57:ad:9a:c7:03:b5:62:
7c:01:3c:c9:15:be:62:be:ab:d4:00:fa:1e:11:e4:
7d:68:0d:4d:e3:aa:38:17:95:5c:28:0f:9e:26:23:
5c:24:3e:85:62:d7:17:16:8a:5c:b1:7d:ef:a7:25:
f2:22:61:4d:18:98:9d:c7:be:7c:ac:74:39:4d:4d:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:1F:63:4E:25:E6:89:73:98:99:DD:55:F1:41:FE:44:7C:70:0B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913AC62/65FABB4EA4F811F1B185F2B86E11F970/_-gfY04l5olzmJndVfFB_kR8cAs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.98.0/23
Signature Algorithm: sha256WithRSAEncryption
65:37:52:8a:65:21:e1:fb:d9:a5:ac:8a:8b:89:76:00:86:a7:
7c:13:6b:fa:bc:b5:f4:69:ff:81:4f:59:2f:5b:9c:6b:82:b6:
4b:aa:3a:3c:53:92:2a:fe:61:c6:0c:61:ab:88:6c:ee:1f:b6:
ea:50:68:52:7d:95:50:3a:1d:b9:65:dc:f7:f9:ea:7c:ec:65:
dc:b4:81:27:40:98:ed:3f:e5:fc:8c:07:a7:22:66:34:d2:c1:
69:3a:5d:a5:38:a2:08:f0:34:3f:fb:ac:e0:8c:e6:42:5e:40:
a0:78:db:78:2c:3f:65:c0:ed:49:77:7d:b5:3c:84:f2:08:01:
e3:d8:3d:83:d3:67:94:bc:2f:75:ba:5c:7c:31:48:15:d5:2e:
9f:e7:ed:2b:29:c8:34:74:63:21:1a:c4:50:26:f2:cc:7b:89:
d3:21:b5:94:e2:d5:8c:46:c9:cb:8a:35:82:2e:92:c6:10:17:
34:ca:6f:ad:3f:a1:09:a1:36:f0:44:7a:fa:4d:5f:ea:a3:f2:
1a:06:7a:5e:29:4c:f5:e6:75:07:73:a3:65:58:9f:3f:a5:03:
de:98:e6:14:8e:22:04:eb:60:02:e6:ca:90:c7:da:f0:f0:a8:
a0:35:91:f5:c4:e5:f0:ae:4b:f0:7d:05:14:d7:43:38:87:31:
96:4b:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:15:53 2026 by rpki-client