Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer (raw, json)
Hash identifier: UsVZQHFnkrtHubZIsjWcuJDyDWgNLOLgJ39PR//0TPs=
Subject key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7DEC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jul 2026 12:58:56 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.26.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32236 (0x7dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 1 12:58:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:6d:47:7b:42:3a:a6:a0:71:82:ca:9b:8a:
23:02:7e:a4:dd:b1:08:78:dc:04:c5:6a:ea:72:bd:
51:70:88:c1:f3:a9:5d:05:b0:4e:c4:a5:e3:9e:3e:
04:df:61:3a:07:d4:4f:3c:4a:4d:2b:d8:3f:02:3e:
24:06:ec:83:db:90:e4:31:b7:0a:19:d5:98:a6:2d:
84:40:91:bd:5f:92:4a:c8:f4:b2:20:66:f7:d2:40:
b1:d4:00:b5:92:0a:5e:a4:e8:48:ff:f9:76:b7:ed:
62:9c:86:40:c3:0c:7d:3c:75:2e:01:79:55:32:be:
9a:71:bc:e3:fe:c9:d3:f8:47:a8:4c:e7:b6:2c:1d:
fc:b9:06:5b:c6:88:12:32:00:b1:be:0f:c3:69:5b:
22:af:b9:f6:a4:b8:d7:ae:e4:db:56:ef:10:8b:d6:
99:92:de:fd:4e:bb:6b:33:4f:37:85:be:d7:08:23:
ff:59:fd:67:55:74:41:4e:82:70:3d:53:82:5c:81:
0c:c2:cb:e9:31:3f:f8:7c:0b:ad:91:b1:60:d3:77:
39:16:b5:7f:dc:bf:ec:8e:99:76:f1:bd:7e:ea:aa:
0a:6a:3d:b2:46:95:fb:97:be:42:a7:9d:07:55:fa:
08:07:b3:34:4c:96:24:2d:c1:fc:5f:f1:02:c7:64:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.26.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:6a:3a:b7:59:5c:ca:e9:1c:bb:b8:96:52:0e:af:c5:00:54:
99:35:52:e8:75:72:0c:f1:c9:57:9e:ad:17:7e:07:b3:06:1d:
45:2f:23:fd:f4:8f:35:9c:64:34:0f:b1:33:ab:d0:03:c0:49:
fe:7a:96:19:c0:2a:51:86:e2:77:b2:a1:1f:f7:38:2d:d0:24:
54:de:e7:4f:d3:7f:37:63:bc:c5:e9:fd:e2:45:26:ca:cb:87:
6e:00:f0:d3:ed:93:96:1d:11:ee:be:db:27:de:0d:74:70:13:
5d:a0:76:8c:10:a2:b4:8d:5d:1d:67:b3:8e:52:96:f9:b3:df:
86:ce:2c:de:cd:62:a3:d8:61:64:8d:6a:99:75:03:62:f6:3e:
68:d2:5a:f9:90:f2:3a:8d:14:87:c4:3c:3f:e2:bd:9f:d5:6f:
22:a6:d6:5f:02:b4:9e:4a:bb:f4:17:4d:98:c6:c6:17:c5:6f:
fc:ec:14:65:3c:df:d3:e9:9e:9c:1b:52:87:2f:a2:dd:2e:fe:
4f:bd:97:d6:a7:a6:32:eb:60:ba:42:ef:cd:3e:13:d9:cd:0e:
4d:32:d6:49:94:11:87:18:02:10:cb:ed:ea:51:ae:e7:0a:9a:
d6:6d:70:aa:6b:e4:eb:e8:a4:30:37:ac:cf:9a:03:6b:5e:cd:
16:79:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:13 2026 by rpki-client