Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
File: LlZ8tNZla-4M-dworw3nIVt_Z-g.cer (raw, json)
Hash identifier: qLV3bIMFwOUNjCnhnGX+HrY0vKt0IEQzDXJa7KZsh5Q=
Subject key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7718
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:57 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 198.15.29.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30488 (0x7718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:08:1a:90:96:d0:e9:e6:ba:9a:82:30:f2:
b0:ba:2b:70:17:f0:81:df:90:a9:50:88:df:03:1d:
af:d7:3b:a1:f4:cc:a6:9f:32:46:10:8a:c8:7f:08:
a3:11:79:e3:bf:f6:ef:b1:b2:db:b2:2f:91:a1:a6:
c3:9f:db:43:af:28:34:2e:c4:6a:35:0c:f4:96:ce:
6a:c3:f1:d2:96:c4:09:f5:ae:27:d9:4a:6f:44:ca:
c0:89:ad:81:4d:51:15:1a:7a:5d:1d:f8:e8:aa:93:
73:f7:9f:7a:d9:39:36:65:c2:c2:57:24:86:f2:19:
3e:69:02:e3:f2:a1:e0:d7:1c:f1:ee:16:60:d1:04:
43:3c:ac:fe:4d:d7:f4:4d:dd:70:88:38:3d:80:59:
91:32:30:df:99:da:fa:c2:2e:11:6a:5c:8f:d7:a0:
0d:f2:cd:88:4f:5e:ab:79:49:53:95:f0:6b:ae:72:
eb:e1:9d:f4:ce:7d:39:e7:d4:6e:04:eb:3d:a3:fb:
a5:97:bc:1f:e9:5a:48:10:88:91:3d:08:4f:a6:57:
e6:f7:c6:d4:18:6f:6b:77:4c:72:89:e2:d1:ef:02:
02:8d:87:83:30:15:65:eb:f9:ec:cc:79:05:ec:94:
ba:4a:b7:7b:ba:07:80:5e:64:9f:e3:08:fb:ed:c6:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.15.29.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:60:93:aa:ee:37:45:0f:70:95:2b:88:b3:49:7c:99:a2:49:
a2:05:69:f3:36:25:41:05:02:7b:14:82:ee:c0:79:ff:c4:5b:
a0:ea:06:92:eb:f5:95:30:fd:64:34:cd:24:a3:9d:e8:5c:4d:
21:3b:d7:56:f5:0d:9a:f0:74:51:87:e8:db:52:93:b9:1f:1a:
16:de:00:3f:9f:dd:66:22:6d:ca:9d:40:1b:49:8b:9e:aa:e5:
77:f2:9f:b1:31:c5:65:b1:2e:ea:97:6f:d4:6c:b4:3f:5c:53:
6c:89:1a:4e:80:90:c4:ef:5f:41:21:71:88:ca:24:20:a9:46:
60:b2:f7:7a:94:c8:dd:7d:a2:1b:30:b8:9b:54:e4:d1:11:9a:
3b:e9:ca:5e:2b:c2:b1:2c:e0:d0:7b:4b:a3:82:22:c1:bc:a0:
5c:01:26:84:c3:9f:1e:74:0f:c6:3b:8e:b9:fa:30:ec:ef:96:
32:49:10:ac:a0:e6:d7:ce:33:1d:0c:b4:f1:c9:f7:95:c2:45:
04:4e:28:77:2b:87:9c:6c:6d:f7:4a:10:00:0a:24:bf:1a:da:
f4:ec:5a:08:77:c8:54:68:27:3e:01:32:39:b1:6b:94:59:28:
3e:b1:ce:8b:69:90:22:17:18:b7:fd:e3:eb:8e:04:fe:31:82:
62:35:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:12 2026 by rpki-client