Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer (raw, json)
Hash identifier: 7N/0FMd3T9ohjGphAXcCmcKm+esdyNTDgJbJE0LVu9M=
Subject key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81A7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 12:59:14 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 161.43.0.0/16
IP: 192.131.13.0/24
IP: 192.203.176.0/24
IP: 198.142.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33191 (0x81a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 1 12:59:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:95:cf:6a:49:d2:6c:44:1e:3e:81:26:f7:
b9:da:23:1a:c6:21:06:50:2d:aa:d1:83:de:ae:f9:
39:dc:49:e3:ed:3f:d5:53:12:45:14:3a:ed:e6:b2:
66:46:5b:b1:3b:1b:b8:ec:04:04:b5:fb:2b:12:d5:
cf:1d:4b:24:b9:4c:69:43:c7:85:e3:a9:f0:da:b3:
c8:85:09:f2:72:ff:d9:1c:1a:11:11:fd:ae:3e:6d:
97:19:4b:8d:8e:37:d0:55:91:8a:98:da:07:3c:7e:
00:5c:7a:e9:f7:83:86:3e:9f:47:0b:84:84:77:2c:
d3:7f:c2:61:0c:c4:e6:3b:3b:dd:e6:de:18:70:5e:
2a:dc:4c:3b:29:91:0e:aa:60:b0:2f:00:4f:97:46:
8f:97:2d:60:d0:b3:be:8f:63:d2:7a:eb:ef:83:0c:
0e:60:42:67:ce:90:65:30:03:43:18:69:0e:82:10:
11:0d:3f:f5:ce:a1:f7:61:cf:0a:f6:54:6a:08:bd:
4e:1c:16:3e:46:e5:22:d8:f1:5c:84:37:84:c4:98:
bb:c3:08:17:49:a9:be:27:9e:34:e3:fc:74:30:de:
ec:18:27:67:cc:d7:4b:3f:6e:8e:36:00:fe:06:7e:
56:24:ba:fb:96:32:1d:8b:33:54:e5:83:d5:0b:fc:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.43.0.0/16
192.131.13.0/24
192.203.176.0/24
198.142.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:d8:0f:bd:8a:ae:79:05:8b:ac:e4:b4:11:e6:8c:f7:7a:c9:
c3:aa:bf:3e:da:49:ab:fb:9f:9d:62:b7:12:21:f3:31:6f:c5:
dd:a6:24:75:20:20:42:d3:3a:9a:88:a4:9a:92:0d:c8:98:8d:
0b:3e:b0:b8:b9:1d:5e:58:56:81:77:d6:79:a9:85:2e:a4:49:
ca:f2:c5:77:de:4e:02:90:44:bd:5e:22:8f:49:22:e8:1c:05:
e3:65:a3:e0:ed:4e:02:3b:c1:b7:76:a5:5d:10:2e:5c:01:99:
07:9b:ec:46:93:e2:46:91:8e:71:a8:1a:74:8c:1e:89:90:78:
36:05:fb:aa:76:ae:38:7c:bc:b1:34:97:91:9c:f3:ab:1d:54:
18:f0:22:a0:00:14:e6:70:a6:b2:a8:a7:69:16:1b:28:9d:21:
24:f3:f0:4f:5a:1e:17:18:15:a9:c8:cd:ee:08:16:72:f2:e7:
dc:6c:da:a1:c6:5f:85:7c:f9:3d:4a:5a:cf:49:bb:79:1c:b4:
48:1c:d6:83:dc:9f:75:c1:52:5f:a1:e1:ae:97:53:23:f0:60:
f0:ad:c1:98:d7:f3:3b:c1:c2:6f:6b:b1:5d:a1:1c:de:22:dd:
7a:d0:90:71:3e:68:5f:7b:74:16:20:d0:ce:3b:2b:72:10:b6:
a5:db:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:44:16 2026 by rpki-client