Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
File: gcJvPY9BNuUZDMehfWr3IkIutm8.cer (raw, json)
Hash identifier: ImCWfQy1XwvPeSiNE0dTXo6AoS9Fkykde135nXZ/Ro4=
Subject key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8402
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Oct 2026 13:46:06 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 160.191.116.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33794 (0x8402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 27 13:46:06 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c0:19:ef:46:14:d5:43:a1:b4:fc:e2:63:b3:
a0:5b:49:2b:65:60:93:4f:f8:e5:2f:89:e4:5c:13:
8c:cc:ce:96:fb:1b:91:b5:c9:e2:0e:30:e9:10:7b:
02:6d:9a:82:e7:06:17:56:43:29:ad:ba:6a:5e:21:
54:50:ac:ac:16:5c:bf:20:f7:88:5d:09:48:52:26:
31:4b:df:8e:62:e0:29:52:8e:55:9d:b4:7e:4a:9f:
45:90:d0:19:b6:b6:90:82:c5:d6:81:9c:74:3d:ee:
c6:b0:7c:7d:ba:3f:c4:d6:c2:3a:1d:08:57:a3:03:
b7:1e:12:54:8d:55:7a:15:e3:91:ba:66:1a:4f:81:
e0:94:ee:9e:34:24:fb:34:d8:50:8d:80:43:77:a3:
53:d4:39:d6:0f:10:0a:b4:44:bc:31:bf:22:60:f6:
0c:02:ec:6f:22:24:7f:d5:80:7d:d3:d5:8e:71:b2:
66:e4:d7:8a:28:60:3c:c8:79:3d:28:3d:09:99:a3:
e2:ca:95:4f:b8:b1:11:56:53:fb:1c:bc:14:56:bf:
cc:95:36:81:22:f1:2c:85:a5:6a:bf:ee:12:60:57:
e6:6b:92:35:83:d4:ab:5c:a4:ab:69:ae:a0:92:bb:
41:b0:40:e0:c3:16:85:1d:bf:f1:13:03:99:02:2c:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.116.0/23
Signature Algorithm: sha256WithRSAEncryption
50:67:99:7a:c5:88:40:9a:cd:b2:20:d4:b6:67:cf:a7:79:03:
6b:fe:f0:c6:ea:1f:ef:60:b3:4e:0d:62:e7:5a:e7:a0:11:c4:
dc:d3:bd:00:de:86:25:07:64:99:d2:3f:ba:6b:cf:2a:19:e1:
d3:11:8a:dd:03:59:da:c3:1b:69:9e:40:6e:fc:5d:f9:0d:6b:
17:0e:a4:99:b2:ad:3e:a3:13:76:17:4f:3c:c5:8e:05:2f:5d:
cd:17:4a:65:e5:fa:22:ab:7c:e7:21:4f:ee:cd:f5:a8:8f:1b:
85:4f:0a:d8:81:26:85:55:25:2a:e6:94:67:ea:73:98:1e:38:
94:94:5d:5d:a7:5a:0e:f9:70:c0:9b:3b:fa:89:c7:a1:29:60:
dc:39:77:16:42:fd:98:91:fd:18:57:bc:a7:52:52:d6:2b:4c:
b7:09:00:17:c1:35:24:a4:1e:f4:61:67:b1:75:ad:ec:a0:35:
19:cc:07:f8:05:e5:96:5d:37:37:38:9e:1a:4a:22:3d:3c:36:
2c:b1:45:0b:9b:dc:c8:82:75:b4:14:28:b8:af:51:85:49:4c:
ac:13:92:73:c9:42:ac:eb:3e:f2:8b:7f:f9:a2:ea:6d:c5:91:
59:54:11:2f:52:b3:61:2d:7f:79:95:b6:26:3f:79:02:90:73:
9c:a6:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:58:02 2026 by rpki-client