Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (raw, json)
Hash identifier: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=
Subject key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CC2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Sep 2026 13:30:19 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 154.8.64.0/19
IP: 154.8.112.0/21
IP: 154.8.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19650 (0x4cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 8 13:30:19 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:e6:5e:79:19:0c:eb:25:43:58:a4:6c:69:
3c:1b:b1:76:40:04:59:1b:10:96:c5:9a:ff:38:6a:
00:ac:27:6a:42:e0:1e:31:62:32:bf:a5:0a:16:c6:
ae:fd:f1:21:70:77:4a:aa:76:51:5e:05:59:e0:5d:
c7:bd:9e:f3:c2:b7:a3:dd:f4:2a:ce:6c:b9:dd:0d:
4e:91:28:62:6a:4d:42:0a:62:da:f9:da:68:2b:dd:
f7:3a:e7:c6:c9:4d:d7:96:22:7c:60:66:18:92:0e:
ba:d9:5f:b9:c9:87:86:90:5d:1d:b7:0f:cd:f2:8f:
36:50:56:fe:07:bc:ca:13:8f:4c:68:9f:2c:44:c5:
ac:06:6c:3e:d4:10:a0:2c:2d:e8:f7:87:0a:31:c3:
3a:bb:56:45:a7:96:06:32:9a:42:3a:b0:7e:bd:fa:
6e:d3:53:2d:01:9d:70:d9:13:fe:86:9d:6a:85:72:
4a:8d:54:5e:64:74:63:1c:25:5f:9a:d1:57:67:8c:
5e:37:f9:67:00:ef:e4:77:28:a4:ad:c7:d0:d7:f8:
c0:40:9e:a5:95:4a:c6:97:4d:c5:f2:9a:ea:db:42:
27:86:c6:dd:ad:97:f9:c0:5f:59:c0:e9:af:3e:2a:
5e:94:1d:ec:be:ef:7d:ab:84:29:b3:77:3f:0f:4c:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.64.0/19
154.8.112.0/21
154.8.126.0/23
Signature Algorithm: sha256WithRSAEncryption
62:43:1f:21:29:84:0f:06:88:a0:48:a8:3f:cd:28:20:3f:12:
14:41:52:9a:c9:06:1b:b2:b5:ab:a7:c0:c4:5d:4f:48:e5:00:
1b:be:94:39:4d:d6:2c:50:8a:2b:db:cb:a0:a5:eb:07:e2:27:
cc:c5:d8:a0:45:e3:32:50:d4:ee:a6:29:a4:4f:10:00:cf:71:
04:f2:c6:90:6f:6f:1d:c8:5b:ee:15:2b:52:6b:fd:2f:b9:54:
8b:6d:d3:33:5c:dc:19:76:fd:b7:53:45:c1:72:59:75:8d:ea:
2d:41:cb:c3:d8:e2:35:8a:7f:82:27:c3:ce:ef:89:ad:71:50:
40:83:52:ea:97:ae:a8:9e:3e:cc:1b:59:d8:28:d8:93:bf:e9:
cc:fa:fc:eb:3a:3d:d4:36:69:eb:52:0f:25:c1:01:8a:fb:e8:
d6:ca:54:65:0c:21:db:62:15:f3:72:7d:c3:8f:d2:e3:df:35:
e7:7e:02:62:74:d6:b1:d9:fe:f8:95:fb:63:10:81:5f:04:7e:
12:93:2c:fa:83:ba:f4:6b:0a:b6:c0:11:24:82:c8:f9:db:76:
5d:80:2f:72:ca:c4:4a:63:50:f5:aa:41:64:02:d1:7e:41:fb:
b7:8f:08:f4:78:1a:d9:c2:50:82:a3:05:c9:3c:18:a7:14:09:
19:aa:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:13:03 2026 by rpki-client