Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
File: 6NbUISgrkBkAAJd2GiVjIjyngV4.cer (raw, json)
Hash identifier: kercikS5cK6UJpqGv2OwuDaK0KqnSiqIhByB6QvbXW4=
Subject key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80A8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Aug 2026 04:40:12 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.228.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32936 (0x80a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 13 04:40:12 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:33:b8:2d:3e:53:06:0a:6e:a7:49:fb:ed:
4c:63:bf:26:1f:c0:f4:7d:eb:ee:3f:dd:10:31:62:
e6:b8:d9:06:46:59:58:82:ac:66:4d:b2:fc:15:0a:
6b:f0:a6:c3:c1:c1:be:49:b0:82:13:f1:4a:60:3c:
f0:3b:72:2a:61:55:e2:96:0e:98:95:53:a1:58:08:
4e:bc:38:56:fb:72:59:fe:fa:5d:dc:2d:d0:b3:0e:
6f:b4:cf:09:ff:eb:ca:d1:91:ed:58:4f:bb:e5:e8:
2c:cf:19:0d:2f:cc:20:0a:a9:28:c0:18:d9:a7:e0:
fc:ea:53:d9:c7:e6:d1:e2:e7:e7:d3:9a:d4:52:96:
10:a7:e9:fc:4a:2c:5a:25:93:6e:22:b1:84:0f:e1:
32:92:cb:b8:9a:55:11:d4:00:61:3a:b0:f5:ea:74:
42:83:d4:cb:a5:f0:90:fe:bb:68:e3:81:d5:66:a6:
01:0e:7c:0a:fc:24:68:78:2f:29:4a:0e:b1:04:d2:
f5:e0:07:f9:db:fa:44:3b:61:63:50:d8:1f:94:11:
93:23:fe:2b:8e:0e:4b:7b:d4:f0:2d:91:b8:39:cc:
ae:29:33:0b:d5:57:9f:f5:76:1a:8d:0e:20:11:88:
57:d2:b7:54:e9:59:5a:2c:7e:02:30:ef:31:b6:7d:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.228.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:06:20:3c:66:f5:b2:81:8c:29:c4:d4:29:01:c6:4d:05:89:
b1:15:19:a4:05:62:71:bc:a2:bd:37:d3:93:a7:98:23:d6:36:
fd:82:b0:bd:3e:a0:ef:70:ab:37:8e:aa:35:cc:4f:f7:62:24:
a6:e3:64:e7:fa:6d:89:d2:42:b3:2c:5a:6f:0c:5b:fd:3c:34:
84:36:c0:93:55:61:73:66:41:2d:e5:15:6c:16:21:d8:35:56:
58:53:b0:9e:19:87:82:7d:08:03:cb:bf:bc:93:3c:68:80:af:
3b:70:5b:23:c8:62:7c:64:de:07:a1:5a:6e:de:54:56:de:99:
0c:52:0a:b1:54:7e:da:98:9e:18:05:5f:c4:50:5f:22:81:fc:
2e:7d:ef:37:96:a9:8d:ad:17:17:40:d5:8e:e1:7a:65:a5:14:
e5:0a:3b:e2:ae:fa:49:cf:ba:b3:38:c1:43:7d:e5:03:55:be:
a9:b1:19:a1:f2:54:1a:3a:60:08:1e:04:f9:51:be:43:1c:a7:
de:b6:41:60:5a:92:27:8d:6f:3e:03:cd:9a:87:0d:8d:d5:1e:
7c:d0:0c:60:3b:64:f7:ac:93:5a:6a:43:f6:f8:1b:e8:0b:52:
f4:2e:b3:c3:34:55:cc:74:20:44:74:ea:bc:b8:44:07:2d:94:
f6:c4:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:01 2026 by rpki-client