Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
File: Klc5bc5w61bAc94adgtipyKwR44.cer (raw, json)
Hash identifier: lVDTw/pXsZc6mal2b3B0eDoz1AtQq9zSSF+w0Vsgjxw=
Subject key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8011
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 06:55:10 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.176.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32785 (0x8011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 3 06:55:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:36:5a:b1:15:dc:6b:b7:e6:bc:2e:81:b6:
f5:47:0c:7f:5d:9d:72:6b:3c:17:94:13:85:97:06:
12:71:02:f9:d6:a1:7b:df:5f:6a:1e:0a:00:d4:a2:
a0:c0:da:c7:41:0b:49:b4:b4:05:7f:95:e9:95:e3:
22:c7:c7:6a:82:4e:95:8b:e5:be:ad:eb:57:7c:b0:
6f:5d:6d:76:35:b4:93:bf:9a:b8:90:6c:f2:29:9c:
5a:90:b1:90:4e:da:c4:59:0f:4e:1a:c7:85:60:68:
62:16:8e:36:ff:d3:9f:5f:93:d5:fd:6c:61:90:36:
36:60:0e:46:ff:fb:d6:29:32:ff:19:a4:a5:e8:b7:
95:d8:af:6b:e3:9b:ae:25:32:54:d7:92:d5:d2:5b:
c2:28:f2:3f:e0:26:b1:f1:eb:36:f4:44:f0:0d:d8:
e8:10:e8:a5:7c:f9:8e:1c:cd:82:0b:7a:69:64:36:
5d:8a:c9:28:7f:b6:49:5a:f4:53:4b:ea:7a:74:51:
17:9a:37:cf:8a:92:11:65:d0:7f:f4:85:8a:c7:6d:
ba:99:09:e4:5e:25:56:b3:b5:97:58:94:16:b6:19:
50:db:de:8e:e5:71:3e:08:45:e4:0c:dc:3b:63:40:
58:be:63:cb:94:0b:4e:4e:fd:a1:eb:ea:4a:39:43:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:93:d2:22:cf:7f:a6:56:f0:0d:c7:22:b4:00:b5:5d:20:7e:
bb:86:55:7b:df:9c:0e:10:2c:47:51:cf:9e:91:8f:20:b3:ae:
6f:54:dc:81:4c:df:ed:45:b0:79:a8:21:ee:11:2b:47:c5:c6:
de:f9:25:bb:83:0c:94:34:bd:30:c3:38:f8:11:8a:bc:d8:be:
3f:48:74:a3:99:88:70:5e:e0:e1:94:8f:a3:bf:50:48:ba:d8:
c1:c4:a0:f4:f6:af:fd:95:af:8a:39:e2:bc:1f:49:62:0c:8f:
41:48:12:dc:87:d3:a0:87:3a:99:dd:00:e8:ff:fc:6f:e9:7a:
c6:16:e0:ce:76:d2:2e:25:81:bd:1d:34:ac:fb:ab:99:18:e0:
23:59:4a:1c:39:cf:5f:ad:d2:bf:b9:5f:a4:84:1a:7f:92:a1:
c9:51:0d:16:f1:38:bb:50:8e:b0:5c:59:f5:eb:ba:52:5a:e4:
90:68:a0:32:62:3f:1b:c2:81:ba:b0:6f:16:17:cf:2f:44:fb:
b8:e2:19:e6:78:7b:0c:e8:f7:61:60:99:71:56:94:e5:f8:78:
2f:4a:ec:4d:49:ab:8d:69:4a:27:bc:aa:4a:43:df:e4:7b:8b:
5d:87:e1:c0:30:5b:7c:61:de:12:8f:20:2e:7b:b8:28:57:db:
73:a2:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:38:21 2026 by rpki-client