Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
File: lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer (raw, json)
Hash identifier: IooaCzkSv1pDRhUYMIwwyw39fk7hQothiQTNFJcuf6o=
Subject key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D7D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Jun 2026 14:17:54 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.181.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32125 (0x7d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 23 14:17:54 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:ac:12:18:dc:a9:a9:c0:6e:0d:bd:75:56:
97:0e:19:fd:f1:73:bd:10:56:ce:db:b5:27:2e:0c:
84:9c:e5:f0:4a:f8:c6:94:d8:fd:85:fc:67:8d:27:
75:9f:2a:93:ca:96:bf:fc:3a:dd:84:e0:b2:ab:40:
1c:0b:9c:8c:6e:65:b8:dd:1d:1f:47:be:c5:df:b7:
c7:69:b6:b8:82:25:77:67:e0:61:e5:66:cf:23:01:
d3:3b:c4:d6:f4:ec:6e:cc:a6:d2:e6:ff:dd:56:9d:
a7:33:75:47:5d:9b:0b:b4:fb:73:bc:3c:b8:7b:9c:
a0:aa:a9:75:6d:08:84:5f:3e:b6:7b:63:8e:e1:6f:
06:97:74:6c:2c:2a:1e:17:30:b8:20:30:f2:17:1c:
c7:af:a4:4c:7b:f7:d1:49:7b:51:47:e4:b8:29:39:
b3:14:28:09:85:09:6f:c2:ed:ac:4b:40:b5:be:37:
67:02:57:dc:08:e2:a1:11:f3:b9:5d:c9:82:61:49:
d5:8e:f2:be:88:88:98:89:9d:d1:1f:2f:eb:2b:e9:
43:a8:a1:2a:c8:08:04:cf:d0:98:8f:a4:71:08:19:
3e:c8:28:5b:a8:b1:3c:f7:ef:03:28:32:b9:c8:dd:
f2:ae:b0:66:d6:39:18:80:6d:01:ed:5a:d6:91:71:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.181.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bf:02:bb:87:64:bb:73:66:96:b0:bf:ef:ed:66:c6:11:81:
4f:56:31:a1:79:58:ab:f8:ac:25:79:8d:c6:54:e6:3b:92:43:
51:b3:34:07:cc:a8:7f:60:c3:dc:ea:00:42:78:5b:ee:69:f2:
a6:ac:32:e2:f6:32:94:2c:38:58:fd:f5:e0:7f:d3:cb:64:97:
ad:69:c4:0e:01:33:8c:1e:49:9e:e8:4d:60:ed:73:82:1a:f6:
56:12:a7:80:7d:10:3a:ca:f9:cf:a5:c1:1b:9a:b9:29:4f:91:
ac:50:73:f4:21:11:7d:11:77:ea:97:69:23:38:f8:46:b7:e8:
b9:20:91:90:ce:7e:13:bf:f3:03:e7:0d:72:68:9d:a3:34:f0:
76:63:84:df:64:0a:9f:ae:4a:a5:62:97:f8:37:22:81:f0:4b:
f4:d7:46:30:01:de:6f:55:16:1d:35:39:aa:aa:78:a6:63:d6:
7b:1e:bb:68:d3:cb:7e:60:aa:18:b9:15:32:60:fa:8e:2f:36:
72:db:af:6e:fd:ea:cc:e7:03:45:d3:34:6e:51:a6:a5:4c:8d:
3e:d7:d4:37:87:dd:a5:11:27:74:e8:67:be:86:8f:4d:b4:48:
e0:c3:2f:7c:00:1c:3a:af:af:f3:e7:a8:3c:ef:67:4e:4d:4c:
a2:63:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:10 2026 by rpki-client