Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
File: GEMtUeYt2nKdH_G-G4H79VvYs0c.cer (raw, json)
Hash identifier: vz+1UM7aToCDXe0kbwJkXKPUnRGQCFf0DVhslcRm8NY=
Subject key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76A8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:37 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.170.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30376 (0x76a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:37 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:26:ec:d8:39:3e:7d:bb:24:9a:2a:90:d6:
35:52:7d:bb:3a:40:89:ea:c5:b3:76:3a:24:88:57:
9b:bd:ed:df:bb:b7:87:35:19:08:06:31:81:5b:64:
6f:3f:01:cb:90:ea:84:06:87:fb:9c:46:55:59:0f:
a3:9c:10:14:7d:75:74:d3:6f:60:0e:cf:0a:8a:ec:
ff:73:11:6d:61:f5:cf:2f:6a:f6:25:be:dc:39:a5:
d1:60:7c:96:d0:25:28:a2:98:05:51:31:ba:ba:e5:
e8:bf:80:de:2c:22:c2:af:95:a6:36:6d:6c:13:8a:
7a:16:20:ba:73:ef:7a:ae:20:7d:3e:c6:b9:1f:b4:
d3:3e:de:ff:c2:f9:62:82:d0:a6:72:2d:c6:93:53:
12:96:c6:89:39:04:27:63:95:49:db:f8:fa:9f:1b:
e5:4e:bc:0b:44:18:97:e0:3c:4c:69:fb:ee:82:c0:
de:2b:75:ec:1c:0e:e3:d0:5f:ee:68:be:16:6c:a5:
4c:91:0c:3f:34:c3:70:ef:d0:dd:08:ff:95:4b:02:
f9:d4:f1:db:94:ec:8c:bc:1a:e1:6d:11:4f:d1:7d:
6a:a0:39:77:95:e5:7d:bf:b8:0b:7b:d5:a8:b0:76:
e7:c7:40:21:d1:b5:23:6e:7f:a2:63:94:87:65:fd:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.170.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:74:88:81:99:9d:49:73:61:4d:a5:16:04:58:f1:6a:52:b6:
dc:2f:db:9d:22:e7:46:d5:ee:3a:2f:bb:4c:b9:0a:02:9d:c4:
de:da:a7:0f:93:2e:ab:7f:4f:2e:62:93:b8:52:5c:c9:c2:1e:
de:04:d2:e7:75:52:e9:0f:17:e3:38:cc:d7:7a:d7:6b:f0:2e:
56:06:19:d6:c6:ff:38:89:96:86:ca:9b:c9:c1:22:66:85:08:
11:40:c2:f0:20:de:4e:f8:a6:33:d4:73:3d:cd:c6:41:86:6d:
c6:52:c0:cc:77:b8:e9:6f:df:e7:25:95:09:16:f3:21:7a:51:
b8:d2:6d:05:0d:b1:bc:b3:90:41:07:6f:36:02:52:31:8f:1a:
1d:e3:97:47:17:9e:d4:4d:e3:f9:0f:ba:01:d0:d7:c2:fe:38:
b3:95:bf:9a:a4:d0:fe:71:8d:ea:2c:c8:03:1b:71:45:2e:f5:
b5:ff:bd:06:e6:56:75:9f:8b:27:9d:3a:67:72:79:3c:bb:bf:
bd:42:9e:70:a8:69:98:03:12:1d:32:68:42:27:50:ba:c4:f0:
83:d1:0b:09:00:7a:ff:cf:b0:c6:29:5a:8b:3a:19:7a:0f:15:
0a:63:b7:0a:9b:d8:20:ec:f3:4c:67:bf:97:73:41:17:46:a0:
34:2e:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:59 2026 by rpki-client