Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8o5mmd5TyazxjWGSpcfjs94y8kE.cer
File: 8o5mmd5TyazxjWGSpcfjs94y8kE.cer (raw, json)
Hash identifier: YlDTrfXL9YNJri2YVQpoBX0O6Nl/JlXqZhAvYRGYclE=
Subject key identifier: F2:8E:66:99:DE:53:C9:AC:F1:8D:61:92:A5:C7:E3:B3:DE:32:F2:41
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 04:21:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.234.231.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33532 (0x82fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 04:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A916B889, serialNumber=F28E6699DE53C9ACF18D6192A5C7E3B3DE32F241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:88:47:3f:a7:07:99:12:e9:7d:d8:cc:18:
c7:50:b8:cc:aa:fa:d7:d5:f3:5c:24:85:3d:db:c5:
a8:d1:d8:1e:14:21:cf:67:a6:f0:c9:26:a8:55:42:
74:ed:55:44:84:1e:8a:38:44:35:90:2c:a7:c0:7f:
d7:74:77:8e:4a:63:9d:64:58:43:01:61:65:2b:28:
ff:59:d1:ea:86:f4:3d:f0:ad:d0:2f:f2:38:a5:81:
84:30:bd:9b:3b:a5:b4:94:bd:ee:ab:00:8e:59:2f:
6d:ca:1b:9e:58:89:c7:ad:65:30:1c:1b:01:1b:36:
52:f5:46:44:fe:7b:be:fd:2e:36:9e:fe:96:53:86:
b6:6a:6e:37:5f:cb:0f:46:e0:b0:52:f0:2c:d5:f7:
f5:dc:7d:c2:29:94:f4:12:31:6c:49:9e:e3:bd:9d:
7f:a6:f3:ba:3c:35:45:f3:a4:f4:44:f1:83:7a:75:
3b:c5:e7:6c:45:32:4c:3d:4f:e1:eb:39:be:d0:06:
25:9f:07:22:56:1a:75:d2:1f:5f:6b:94:88:02:3b:
23:32:b5:4a:e2:62:03:82:9f:ea:32:61:77:0b:a2:
bc:f9:24:d2:01:f4:00:a7:41:61:c0:6f:29:0f:0b:
01:53:14:26:d3:dd:09:55:ad:d5:10:92:e9:ea:38:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:66:99:DE:53:C9:AC:F1:8D:61:92:A5:C7:E3:B3:DE:32:F2:41
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B889/86A37DD0BD4F11F1A6005CCB5A11F970/8o5mmd5TyazxjWGSpcfjs94y8kE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.234.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:76:b3:bc:f4:cf:8b:35:ac:1e:db:0c:1c:a4:db:eb:bc:56:
af:9a:79:aa:dc:5a:e2:99:f3:0f:00:98:5e:93:f4:ce:74:f6:
24:1e:ad:52:f3:e4:c8:4c:1d:07:3c:5c:43:7b:a8:7f:cc:70:
7b:92:54:2d:c4:71:36:46:87:0f:1c:da:dc:2f:53:60:da:4e:
45:2b:73:d1:0e:6e:cc:8e:9c:65:fb:39:40:c9:b1:44:72:76:
43:d4:b5:f3:5e:bb:24:0e:90:3e:31:4c:ab:43:70:4d:dc:3a:
4d:77:8b:16:03:3c:dc:ed:b7:f6:00:31:58:bc:3f:56:82:37:
5d:4f:a4:92:67:cf:cf:fb:61:b3:46:48:3c:ea:e5:44:07:c8:
e2:9f:91:85:68:94:13:7b:14:fd:14:f8:c4:66:b2:fe:55:e8:
b4:7a:47:3a:58:af:d6:14:23:d8:ee:05:5a:56:31:12:1b:97:
73:40:9d:79:89:04:ab:ca:f1:40:7d:34:5f:54:f7:8c:da:27:
f5:3f:fe:ee:3b:ef:44:97:49:51:a5:73:c4:62:9f:18:db:d5:
99:e8:6c:ee:37:b4:45:ee:24:e1:7b:f1:ab:c2:7c:1f:a5:d4:
4f:6a:ff:d4:68:0f:94:18:da:fd:79:81:23:4b:f5:06:83:13:
e6:36:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:52:39 2026 by rpki-client