Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer
File: G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer (raw, json)
Hash identifier: tCnC9fymlhpCz/Tg+VfejP1dN0IJ67SSwoKKBJa3hLo=
Subject key identifier: 1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 824C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 07:29:47 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.182.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33356 (0x824c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 16 07:29:47 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91E1EC4, serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:16:40:5c:44:18:a0:90:10:db:d7:dd:55:
e1:be:18:f0:5a:23:5e:7b:44:0b:d6:e7:26:45:2a:
63:6a:d5:cb:bc:af:8c:66:c7:ef:df:b7:dc:ff:7b:
18:cd:a7:2b:0a:77:31:4c:99:7b:2e:0b:92:18:56:
22:2b:62:a6:b0:fd:ad:6a:07:0b:86:6a:18:4f:8f:
78:50:3c:57:a1:1a:fe:44:b4:ef:7a:47:c0:84:50:
22:34:29:7a:8a:7d:26:e3:fd:21:8c:c5:2c:54:67:
99:3d:e3:5b:74:72:c5:c0:c6:79:6d:c6:ca:35:ed:
ba:87:a9:4d:ae:dc:bf:b0:a8:e8:73:74:54:38:fe:
97:d0:d1:f0:97:4b:c0:56:00:67:4f:9a:7c:10:0f:
00:a6:df:55:8c:24:d4:cb:c4:84:c3:88:67:5c:ea:
5c:fa:20:c2:75:dd:77:20:ec:fa:2a:f1:c2:10:a4:
d3:5e:00:22:30:ab:29:b1:95:97:b1:88:6d:af:4b:
0c:f1:29:68:2f:f8:f7:26:33:13:70:35:54:68:e9:
11:b1:49:34:01:d3:56:89:9a:4f:12:57:3e:a6:6b:
d9:08:77:9b:fb:58:a2:27:98:0e:73:4b:e4:75:ed:
0e:ae:5a:56:2e:3d:33:58:5d:0c:75:c6:81:32:5b:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:53:75:09:05:c2:9c:ba:3c:ae:43:9c:8c:1d:21:83:05:12:
e6:8b:77:dc:eb:95:26:e5:f5:69:52:39:03:c8:a0:f3:d6:14:
13:60:4e:68:9e:7d:b0:1c:5f:11:ee:5e:5f:b5:e4:78:0c:52:
ad:88:bf:49:ac:90:ec:da:e1:48:9a:05:1e:97:d1:c5:8f:41:
f1:3f:16:0e:26:29:28:44:1d:8c:1b:89:94:df:fe:ae:52:4f:
0d:3e:f3:c0:77:dd:2f:b3:98:c1:3e:3c:b9:25:7b:9e:ba:ab:
0b:ea:3f:aa:a3:65:c6:26:89:77:83:03:c2:99:90:a0:21:00:
ea:df:51:21:e1:39:f9:10:d9:56:2d:25:a0:b0:55:23:8f:81:
65:df:3a:52:5a:7d:f9:87:10:c8:dd:26:ce:c9:99:92:72:89:
f4:cb:a4:60:83:f3:e9:28:bf:7d:65:eb:75:66:fa:93:af:02:
1a:dd:51:a1:9c:a9:32:c1:6d:6e:a7:b4:7c:d3:33:cf:b0:79:
88:6a:26:aa:c3:b7:e8:b3:43:bb:54:61:7c:b5:00:e1:33:0e:
8a:7a:66:08:6d:33:4c:89:cb:e1:bb:63:42:bf:04:b7:4f:f1:
fe:f9:1a:bc:2f:cd:64:45:9d:58:9e:7b:a6:bc:e0:95:8f:9a:
c1:c6:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:37:58 2026 by rpki-client