Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer
File: l68SGHeJLIAH_k5xa4jjO-74AN8.cer (raw, json)
Hash identifier: Ka3UxKVuTow4uo/ovtRF8jmk6qJ4sMIv0Xzvd68zDVw=
Subject key identifier: 97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F9F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jul 2026 08:32:37 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.130.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 06:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32671 (0x7f9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 29 08:32:37 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91B1F08, serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:20:14:2c:2f:e4:7c:8e:8e:50:a4:08:01:
7f:7e:28:ac:83:30:59:81:6e:ba:e2:34:6e:bc:cc:
cc:b4:94:86:b5:2f:9d:ad:4e:58:14:2a:ad:60:64:
94:21:10:13:7f:1a:84:a6:da:66:bc:52:cc:f6:a7:
2a:ec:90:10:e9:06:13:00:c1:f4:81:86:eb:fe:54:
70:b0:7d:20:dd:f9:ce:af:c4:9b:43:b1:91:2f:e4:
4b:69:d8:81:eb:df:f9:0b:9f:38:30:da:3f:91:4d:
b0:cf:b4:aa:2a:8b:18:bb:62:79:89:2b:72:a6:ff:
2f:51:ad:0a:ec:0a:9d:ab:ff:99:f4:05:e3:68:34:
e9:d7:68:3d:3e:1b:da:88:de:ca:90:9e:9c:b5:2d:
08:11:90:41:14:c8:a6:d0:a3:8b:10:ec:e7:ca:39:
16:04:eb:11:21:41:d6:c0:4c:75:b4:80:60:fe:04:
17:a1:73:32:c7:fc:67:3c:65:db:8f:78:5d:96:31:
1e:72:a9:e5:65:f5:57:82:f5:f0:7a:88:bf:e3:f9:
3c:5f:09:17:89:f7:fe:0a:a1:44:84:e9:4b:f7:88:
15:95:bc:53:91:09:61:35:84:21:4d:42:09:e1:13:
bd:5b:74:7d:52:05:b9:04:e6:fd:1e:da:ea:3f:31:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.130.0/24
Signature Algorithm: sha256WithRSAEncryption
82:36:b7:e3:2a:c6:68:74:e8:b3:7c:48:e9:0e:40:b7:4b:5e:
76:b8:3a:5d:21:a9:13:bf:0b:c4:f2:45:84:af:03:d3:51:36:
85:5e:96:36:28:9d:2e:e5:28:b4:59:1d:0e:c4:fc:08:c0:fc:
1f:7c:45:1a:ef:a3:ad:2f:78:70:5e:33:7a:bd:57:64:c8:34:
c6:1c:bf:da:ee:95:d8:a5:d3:e0:d3:fb:9e:b3:b6:05:36:9a:
e3:40:3b:12:a3:19:e9:8e:dc:53:ed:c8:be:66:32:60:6b:1e:
30:c6:af:cd:de:cd:46:45:2f:0a:19:e5:7e:05:7e:c3:72:93:
04:50:f3:f8:db:ff:e5:c7:4b:1c:31:ec:f6:09:43:40:c5:20:
37:50:f7:53:fd:83:de:c4:1b:d0:5e:2f:7c:e3:84:dd:39:6b:
6e:b7:16:78:d4:83:d0:f7:3e:56:77:9c:ed:df:59:7e:63:ce:
00:7e:9e:54:de:4f:5f:2b:c4:0c:f9:20:d7:4a:09:9b:d4:4c:
89:1c:34:3d:4d:20:e8:68:6e:22:a9:00:db:f2:8d:36:aa:97:
51:24:0b:c4:9a:df:9d:65:be:16:af:3b:0a:82:a1:cc:f6:1e:
06:dd:1d:05:fa:be:bf:d7:ea:e6:e4:eb:44:2f:a4:e6:05:12:
a7:5b:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:05:55 2026 by rpki-client