Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
File: Gb4TIRiPCXbTLoNtGvulRidmV-M.cer (raw, json)
Hash identifier: a77VlZJTTZ1RmmvcwzHCP3vaJBhl0mAbBaaJeZ4GQtw=
Subject key identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 770E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:44 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.42.86.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30478 (0x770e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91174DD, serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:5e:65:b8:ab:f7:99:ba:d8:b9:ff:59:12:
64:9c:51:b0:93:a9:c5:ad:9d:80:fc:42:2e:73:c0:
d4:15:db:96:c3:e6:27:d1:b7:28:a2:a3:70:28:ab:
3f:47:e8:3d:1b:a3:d9:41:28:c7:06:c6:81:21:db:
64:f0:36:f0:8e:53:a5:0a:b7:a3:73:b4:b9:ca:69:
0e:97:9a:6f:c3:36:00:c1:d1:40:91:a9:be:70:ce:
7d:47:25:bf:35:79:71:c3:08:7e:9e:df:e8:2e:bf:
ea:7e:6c:ca:99:b7:e0:70:ad:e8:37:46:fb:bd:66:
b4:d9:27:2d:f6:c1:41:1c:87:5a:93:ff:19:7d:51:
7f:24:d1:bf:cc:6a:83:1b:aa:27:d8:56:9d:39:35:
5e:01:cb:0b:01:a9:a9:c7:5b:f1:12:db:1c:04:f0:
b1:a3:83:5d:37:86:ab:b9:4b:1a:0d:33:f3:0f:41:
bb:e8:89:d6:d7:2f:42:90:ff:99:87:27:2c:1b:85:
ce:e6:db:2a:1c:f6:8e:67:5f:7a:b1:54:1f:34:34:
62:0c:ab:4e:0b:5e:82:de:46:72:0c:56:63:c7:ae:
18:05:d8:aa:ab:0a:32:c0:34:10:10:7e:7f:ac:d4:
a6:4f:2a:f8:e7:b2:b6:dc:b8:e5:37:05:d7:67:3c:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.42.86.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7c:bc:de:a1:fe:a2:3d:88:15:9a:90:55:25:f4:1a:87:21:
61:45:39:09:09:11:ce:e6:9e:29:4d:2f:b6:94:6d:69:4a:a6:
7d:2c:4d:d3:e5:07:78:4a:cc:3a:52:09:9f:12:3e:96:1b:48:
fa:56:c0:e2:29:b3:5b:a8:49:87:11:0a:ca:54:78:b0:be:dc:
51:57:83:6a:c7:45:15:6d:20:f2:0a:26:4d:8b:02:13:a6:a1:
61:82:c9:dd:76:87:b4:79:ff:92:3d:5d:6c:8d:eb:a9:77:de:
9c:14:83:20:ab:9b:04:8d:03:09:53:07:80:37:5a:51:a1:f7:
0e:85:f9:e0:02:03:3b:59:40:41:ba:f0:9e:dd:d7:4b:18:aa:
20:1e:7d:18:ba:c1:a5:dc:64:48:f5:8c:06:e7:5e:83:8a:17:
c3:9e:f8:8a:92:f4:c9:7c:ed:6a:e4:78:60:b8:fe:5a:52:b2:
a3:7e:f2:8f:8c:1d:81:2c:c5:d8:08:ac:ce:df:32:b0:61:dc:
be:db:6b:66:8f:ad:d4:f4:71:57:4c:bd:b0:98:3c:53:58:ad:
d9:08:f1:da:b5:46:cc:fa:d0:1d:74:91:c1:1f:91:0a:d2:a0:
ea:bc:8b:67:a7:f0:d9:41:19:8a:2c:6f:78:9d:ef:20:34:c2:
2e:b9:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:32:18 2026 by rpki-client