Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
File: hwGGtlfRGymKhLAkIO504fu1woI.cer (raw, json)
Hash identifier: WR6R6Qo6Cbt0tdXp436L/Iqqsx2SDJZIVAN9J149xZs=
Subject key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82FA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 04:16:03 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.213.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33530 (0x82fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 04:16:03 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:e9:7e:5f:5b:16:1a:3c:90:18:dc:00:25:
f8:b6:6e:e3:67:42:7e:cd:0a:58:24:c7:e7:5c:5b:
4b:9f:04:c3:46:ef:f6:68:7d:93:58:f1:43:d8:9e:
30:f4:bf:a9:fc:2f:a0:bf:1f:38:4c:98:a9:3e:83:
13:a9:2c:85:e4:4e:2b:be:49:ce:f4:a2:9f:20:85:
54:6f:77:01:97:0e:75:53:03:d6:a1:ed:a3:ba:9d:
f2:60:b6:e8:c6:98:0b:99:19:97:63:de:f3:ab:d6:
65:9b:8c:e0:e7:4f:2d:50:4f:b3:46:7d:e9:fc:10:
54:a7:aa:40:0e:a0:e0:ac:40:1b:e9:b1:5b:bc:d6:
79:fc:3b:ef:6e:b9:e0:8e:54:2d:38:3c:54:7d:0d:
8e:3a:ac:fb:bc:90:21:9c:dc:ef:83:76:a7:67:07:
74:b8:1c:2f:7e:c0:89:ce:8f:0e:27:eb:3f:a4:39:
e6:f6:92:f9:2b:80:af:8f:b7:14:3d:1c:e6:d3:84:
05:3e:9f:df:da:f2:54:b9:2d:5a:99:43:21:3a:0f:
03:de:c5:3b:79:2e:d3:01:a7:cb:79:45:ef:14:13:
fb:75:d8:c1:1b:e4:63:8f:31:9d:99:38:8f:8c:0e:
9b:58:07:55:fc:78:ee:95:46:45:75:fd:a4:1d:9f:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.213.0/24
Signature Algorithm: sha256WithRSAEncryption
20:96:d7:31:b6:9a:c3:ee:e0:be:db:0e:95:6d:3c:69:28:96:
9b:62:25:8c:b9:c1:9a:af:77:88:1b:11:22:6e:f2:36:09:c1:
48:a7:89:56:99:3f:41:69:f0:8e:89:f7:96:08:40:75:70:d2:
cf:c2:5f:9e:50:8f:bf:9c:aa:bb:da:82:a3:ad:6d:93:b6:31:
6e:46:ec:f2:4a:6e:19:a8:89:a3:15:9d:c7:c3:66:c9:66:98:
e4:c1:9a:eb:ac:39:2e:0a:0f:f4:4d:cb:0f:12:2a:b9:bd:21:
0e:32:73:2c:49:83:ae:aa:03:b4:6d:90:f5:5b:09:80:cc:6f:
23:24:fc:2e:ef:8d:3b:f9:10:1d:2d:76:88:dd:47:21:a3:b6:
99:cd:dc:ad:72:a2:1f:cb:a7:81:84:0f:0a:f4:93:ee:ad:75:
9e:0e:24:73:fd:d2:2b:11:e3:7c:7a:cc:81:a6:fe:98:9e:09:
cb:f3:e2:e4:ea:78:c5:41:d1:a1:ba:15:e0:e7:06:96:62:ef:
13:72:de:19:3b:93:95:76:af:f0:c5:09:1b:0b:cb:1f:2b:2c:
a1:dd:b4:ac:bd:e7:9e:cd:8c:ec:e5:d4:79:f8:18:94:bb:be:
d4:7f:db:8e:9c:32:ef:82:5b:b7:77:61:26:7a:b2:a3:c3:84:
fe:a5:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:58:02 2026 by rpki-client