Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer
File: WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer (raw, json)
Hash identifier: vM0vxRtvO4UQb82dDoFYqlmncXb7Xhx8GySpmjXQsVQ=
Subject key identifier: 58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F73
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 04:50:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.178.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 13:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32627 (0x7f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 28 04:50:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9193227, serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:79:72:d3:47:d1:ef:e2:3f:2e:ad:b4:ae:
4d:21:98:4f:df:29:e3:02:a7:83:c1:ca:82:61:12:
b3:50:b4:70:ba:a1:6f:19:15:88:a8:36:75:7c:10:
a8:da:12:4b:7c:63:ea:cc:c9:86:48:b2:3a:d8:1d:
a4:29:af:8a:43:f5:57:cd:0d:74:1f:b0:16:d1:4e:
87:40:60:88:e0:0c:7f:d6:3e:23:8b:3e:b2:4f:5f:
09:9f:3f:e7:3e:1d:d0:f0:f6:ea:00:50:04:22:65:
1e:50:25:82:3c:ff:b4:2f:e7:50:83:6f:59:c4:6b:
7d:78:fe:4c:e1:f0:b0:58:4a:7c:b4:4f:67:11:35:
9f:ae:b6:46:5e:ce:e5:d8:20:56:9e:f1:3c:ce:57:
c0:08:4f:6c:99:b1:56:80:6f:42:0a:ef:c2:4b:5d:
45:f3:60:50:2c:1a:88:19:5b:62:7e:66:2c:67:98:
36:b3:04:37:50:44:21:c4:c4:1b:4f:4f:f0:96:e9:
51:5b:e6:8e:c1:ec:51:09:02:1f:53:d9:a7:57:d2:
4e:44:6c:0a:47:2c:f9:e0:32:6f:bb:36:48:c8:68:
6f:cb:e5:25:1a:e0:f2:7b:32:57:8d:b7:05:9b:89:
21:12:b9:5e:32:57:09:ca:90:52:3a:dc:16:5f:c1:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.178.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b7:8f:e6:d3:34:28:67:6c:57:54:7e:02:03:25:bf:7e:a3:
d2:7f:6b:3c:ed:38:13:11:61:f2:88:49:1e:98:88:23:a2:b8:
d7:5e:85:e5:34:c4:23:25:ff:51:0f:96:91:13:37:4d:2f:03:
02:28:09:f0:f4:39:e9:72:07:e6:ef:3a:33:2f:35:c6:2b:24:
b1:dd:cd:30:18:76:c8:10:fc:09:48:41:6c:25:5b:b1:5d:82:
bd:cb:80:00:1d:30:31:75:45:99:d9:54:ff:ee:90:15:20:98:
15:74:e3:1d:19:45:20:dd:9c:cb:69:4d:0f:4a:16:e0:6d:e0:
b5:28:ac:f6:a8:f2:03:5e:9a:ad:a9:21:04:6e:13:47:59:74:
b6:a0:65:ac:a8:e5:ac:80:42:22:19:95:6d:44:aa:6a:1f:27:
18:b8:ae:00:9b:07:9c:d9:c3:6b:b5:92:b5:50:80:b6:ca:a1:
46:3f:1c:2d:67:d0:df:e9:54:37:c1:95:6b:94:0b:48:ad:b1:
8a:05:70:fc:df:41:83:51:f3:60:66:b2:04:05:74:1c:76:06:
bb:81:ef:13:51:4f:49:5d:9e:e3:49:42:e6:ad:ab:cc:99:7a:
b0:47:55:5d:c5:1c:fd:23:33:f9:a3:31:57:2f:ca:37:9a:6b:
3e:98:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:58 2026 by rpki-client