Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.cer (raw, json)
Hash identifier: CjVxung5DhpUY0t58lcN93FGaEEe7lRk56H9z7lsQRg=
Subject key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81C3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 13:37:57 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.58.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33219 (0x81c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 13:37:57 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:4b:fc:14:95:e5:2a:02:bc:af:57:f8:0c:
6c:75:e6:33:8e:c5:70:8e:3d:15:a6:4e:0e:f3:35:
e1:67:a8:bb:91:58:82:33:b4:5b:e3:ce:87:0a:b3:
10:54:4a:3f:cb:63:ba:40:82:ae:44:25:1c:81:51:
ca:e8:a0:3a:7d:0c:26:1f:9a:67:b9:52:d8:9e:f9:
54:8c:5d:37:43:b3:bf:5e:4d:b2:5c:5f:91:a0:1c:
55:cc:14:23:1b:f9:53:86:50:f7:b0:c6:85:04:fc:
f9:0c:33:46:1d:be:45:e0:bf:85:ea:50:06:c2:63:
9f:0c:df:a7:21:38:b9:fe:71:85:1b:2b:ee:f4:bf:
fb:a1:67:8c:eb:bc:1f:06:08:3e:ce:b1:36:fc:4a:
df:8b:38:96:05:37:34:1f:aa:07:76:72:1c:f2:72:
40:e0:b6:4d:72:fd:24:8d:01:2b:f4:9e:81:ae:37:
44:bb:a8:eb:0e:49:64:df:38:6a:8a:ae:98:5a:b9:
8c:9f:82:57:6f:2b:dd:00:33:1e:b5:f8:72:26:55:
af:ce:88:21:1f:e6:f9:26:7c:b4:00:83:37:f0:75:
46:d8:8a:14:5c:59:39:4b:08:36:a4:9a:f3:26:f3:
b9:aa:9c:d7:a5:93:17:09:a1:0d:2b:75:41:49:7a:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.58.0/23
Signature Algorithm: sha256WithRSAEncryption
49:c9:e2:48:3f:54:82:24:e9:aa:ca:5e:86:0b:f3:1c:5f:4c:
8f:42:af:e7:b7:69:96:b0:a7:72:9e:8e:d1:f3:bd:11:b3:8b:
1a:23:78:c0:a0:7b:fb:a0:e9:8c:03:a8:a2:5b:8c:7a:23:16:
68:77:8b:d8:a2:84:21:e8:a5:bc:6d:a7:68:e9:2f:bd:11:c8:
20:b9:5b:82:8b:8b:39:4f:6e:70:5e:fb:0c:6f:ec:74:a9:bc:
fc:06:60:20:a6:06:b0:66:1b:12:a6:7c:35:ea:aa:e9:2b:57:
27:86:f8:2b:44:8c:bb:65:1c:c6:6c:d8:c4:44:a2:95:3b:52:
aa:2c:1b:78:11:3b:3f:4f:d6:6a:dd:92:7f:4f:37:65:4f:69:
b7:ea:11:e0:85:94:28:d7:33:1e:53:0c:7b:c1:99:e1:41:e3:
03:f5:46:d9:07:d2:6d:81:e2:cd:b5:d4:a7:0a:97:10:6a:14:
75:3d:4e:72:5d:32:0d:20:e6:06:b2:f5:2f:09:33:ce:1d:ce:
ad:65:6e:b2:88:b5:a6:ce:03:94:fd:d5:a5:6b:30:be:a4:8b:
59:1d:09:90:e5:12:ce:8a:1f:c2:60:eb:0a:73:a3:e6:c0:7f:
89:9e:9a:2f:86:aa:c9:b5:18:d2:42:ca:d6:99:99:f2:94:6f:
05:bb:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:01 2026 by rpki-client