Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.cer (raw, json)
Hash identifier: ziXFbEv+/RtimnuHzXe18GqES+OrlQ9vXx1KafG8J4g=
Subject key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 810B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 20 Aug 2026 13:53:58 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.25.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33035 (0x810b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 20 13:53:58 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:82:e0:dc:8a:57:64:e4:23:03:a8:ad:bb:
82:48:38:7d:8a:7b:89:c2:6c:2a:21:50:ab:a3:02:
09:d6:e8:e5:61:d6:d1:dd:7a:2d:f1:92:b8:26:b5:
52:6b:a3:fc:2c:9b:11:11:d6:b9:0a:e4:23:7f:72:
ca:2e:07:1d:60:75:d1:6c:1d:13:9b:18:48:7b:da:
e4:2e:b1:8d:40:d0:43:65:83:ed:c7:63:23:87:5a:
e3:ae:b5:44:3a:bd:bf:d0:f3:63:8b:3a:53:6d:75:
94:0e:fa:5f:11:31:85:34:8e:51:c2:b3:a8:dd:ed:
79:9d:4e:e1:42:1d:27:3f:67:de:fc:8c:4a:4b:f2:
85:89:cc:9a:9b:4e:07:85:78:c3:1c:28:db:b0:d4:
74:f5:fa:7c:b5:a4:ca:33:e6:79:e1:db:b9:61:50:
ca:05:dd:df:37:a4:f6:24:15:ee:d4:c8:36:e9:fa:
73:7d:76:b2:26:e0:68:4e:bf:a3:70:e2:0d:3d:42:
3f:b7:b3:e2:a0:f7:cd:52:cd:56:d1:fa:4b:7d:dd:
aa:b3:65:3c:6f:4c:16:e4:c7:e0:d0:be:27:91:d0:
76:19:c6:46:ee:bd:d1:8e:cd:dc:09:fb:ee:04:e1:
e0:e1:b2:d7:c7:fa:03:7e:21:d4:41:5b:86:26:d8:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.25.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bd:e3:1b:31:f6:f5:a8:92:cc:7b:7d:34:f2:73:13:cb:1b:
fb:e5:1e:06:57:a1:0e:69:db:a9:bb:49:a6:8f:9f:d7:ef:b5:
16:6f:8f:6f:21:11:b3:98:5a:8f:3a:35:84:28:5d:54:ba:b7:
41:61:1e:ad:e5:01:42:ce:06:5c:75:b1:e9:e4:4f:6c:4d:7f:
70:2d:05:4c:e2:76:ff:ec:70:76:a2:95:0a:c1:16:96:e3:5b:
a0:0b:ef:0c:f8:97:9a:13:f7:c6:79:67:cc:9b:70:d8:66:aa:
d7:c5:31:77:ac:4d:d3:c7:f7:a6:27:5a:fd:29:fb:32:cc:25:
f6:49:4a:6f:7b:c6:7f:71:0f:9c:15:56:6b:83:04:7e:9c:d7:
df:d6:e2:8f:3d:fa:03:a0:d2:66:d9:3a:8b:f5:4f:82:ad:05:
a1:b0:c6:62:4f:ea:e1:56:64:5c:65:4d:9d:27:c8:a4:8b:f5:
d6:0c:fe:ac:1c:13:af:73:66:7a:c1:ca:96:1e:7f:a1:2a:db:
f6:16:14:3a:04:43:c5:a7:da:76:84:7a:b7:7b:55:79:cd:5b:
36:8e:ea:76:04:e6:26:5f:76:bb:1b:b8:2d:07:4b:ca:8f:8c:
26:a6:d8:36:09:9d:c4:8a:1e:4b:44:71:c9:83:50:fa:72:f8:
68:56:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:16:46 2026 by rpki-client