Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
File: kGA-NU21aLPKQpAOcDAR55ZiiS4.cer (raw, json)
Hash identifier: jxyJIfcF97CePVyzJ1G2svo0a+7ooTJ377eAg/Tyidk=
Subject key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 805D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Aug 2026 14:16:06 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 72.9.128.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32861 (0x805d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 6 14:16:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:25:c1:8f:95:bd:a2:ad:eb:b0:fa:43:52:
4d:d3:d6:98:84:90:14:fb:97:f5:60:1f:ec:19:b9:
17:01:8a:0e:6b:63:81:cd:d8:e2:83:ab:2f:25:4e:
ee:96:cf:05:32:c0:56:8b:1f:62:84:f2:4f:db:c0:
2a:36:19:d0:14:96:bc:0a:c0:de:73:a9:6d:58:1f:
25:72:d7:b3:fd:f7:c1:17:67:60:d9:ad:4e:41:70:
d1:c7:bc:cb:cf:1e:63:8a:9f:5d:e1:f4:32:97:24:
81:a6:22:45:8e:99:18:31:0b:71:9e:07:f2:22:72:
2a:4c:23:6d:5e:1d:d6:e4:1d:b6:4f:2a:ff:03:65:
a3:7a:bd:20:60:d3:7e:77:4a:69:b4:f9:7e:8a:a2:
7a:fd:b9:65:0c:8d:7a:20:22:e3:e5:bb:81:19:eb:
a7:1e:80:01:8e:d8:be:9e:e9:9b:57:bc:89:46:6b:
44:a3:ca:cd:f7:c9:ee:be:da:de:96:22:36:6d:dd:
02:f5:7b:a0:6e:43:ea:24:5c:41:d3:48:e9:36:ba:
a8:16:3b:90:d6:a4:85:e7:ce:48:17:aa:5c:1c:2c:
a1:76:bf:c9:15:b7:1c:ca:0e:0f:ab:b4:ba:1a:31:
38:1d:1f:88:5a:8f:3a:23:2f:ec:88:56:d0:76:79:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
72.9.128.0/20
Signature Algorithm: sha256WithRSAEncryption
57:08:11:6b:7d:a4:f1:81:50:50:ea:59:b1:47:52:23:10:08:
fa:c4:21:ca:7f:79:65:9c:a9:f2:06:8c:b7:6c:9d:7a:25:4c:
0c:1b:45:32:0d:59:59:87:c9:60:7c:ed:37:2e:f0:9a:ef:49:
4e:c7:9a:45:e1:d5:aa:3b:5e:99:66:36:cf:0b:d2:50:5c:58:
db:3e:67:c8:bc:6b:99:f8:32:f4:5f:bd:32:12:54:7d:fc:a1:
40:2b:6d:37:96:4a:40:3b:c2:98:7f:08:e6:19:09:2e:6c:54:
f0:23:2a:af:a2:57:27:72:89:be:1f:94:9e:a3:47:65:9d:83:
b9:e4:5d:e8:8b:e0:e7:ec:36:a8:32:ab:f3:ba:54:a9:c5:f6:
cd:e8:46:55:68:1a:5c:74:44:a1:e0:64:2b:5e:09:8d:79:83:
d1:a1:30:b8:53:de:9c:16:d7:55:8e:15:c7:4c:26:c3:9a:b5:
52:fc:27:44:ee:dd:6b:2f:e0:c0:dc:8f:f3:71:62:97:1a:bb:
a0:f7:b6:36:b8:a2:34:14:bd:d7:8a:dc:a6:09:ef:9b:a9:71:
28:f4:f5:df:c4:b8:ce:48:2d:d5:8c:c7:5f:0e:7d:67:f3:57:
ef:a3:6b:a6:8f:c5:48:86:ca:29:80:dd:9e:19:f0:5d:b3:e1:
4a:89:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:28:50 2026 by rpki-client