Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
File: gmtEdLxvTzvkC151EfEFyuf-jAw.cer (raw, json)
Hash identifier: i3h8Q/j762H9kGGghugFRH7jwzn0CxJ7ECtu+M4cF/o=
Subject key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 819A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Aug 2026 07:12:20 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 192.188.86.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33178 (0x819a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 31 07:12:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:ba:6a:cc:0d:4f:9a:36:d3:4f:9d:57:26:
bd:3f:72:1f:a5:2d:d1:99:35:1d:08:c0:e3:1c:02:
2c:57:12:65:f1:ea:36:eb:c8:88:78:db:b9:0b:d3:
cc:1e:7b:26:0a:a5:de:69:18:c8:c3:93:55:d5:bf:
4f:c6:49:2a:67:1c:5a:61:c3:54:09:75:48:34:49:
09:07:fa:87:9f:d1:10:de:9a:ba:bb:56:59:a4:6d:
a3:81:52:29:d9:6a:77:7a:fb:0c:e4:5c:92:2b:cc:
28:b7:44:b4:93:de:90:d0:d7:f6:75:e6:36:c2:e4:
c6:9c:85:fe:cb:7b:be:a8:44:0a:a8:2f:e4:a4:0f:
c9:c2:28:d6:63:53:94:94:d5:36:2f:24:59:e5:26:
c6:d1:d0:e9:80:f0:5f:c0:18:21:d2:c9:1d:ef:4d:
5a:4b:0c:b0:2a:b3:65:74:2c:11:26:5a:0e:fc:9b:
6d:e5:aa:23:04:5b:fc:28:9d:1c:5c:c5:32:e9:b0:
c8:eb:e3:25:15:be:d8:30:c2:10:b7:65:47:42:1e:
ba:08:17:a5:9d:23:5b:dd:d7:fe:53:ef:ba:ec:68:
83:48:4c:85:8d:e5:0d:38:a9:f4:10:5c:fc:cf:e0:
05:37:74:92:1d:38:1e:c7:f4:e0:36:fe:b7:e0:05:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.188.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:cc:fb:bd:d7:98:d8:b7:f0:62:7a:bb:ae:ce:5f:69:d4:2d:
d0:aa:bc:ec:0c:52:a8:43:04:c0:b5:11:b5:a7:ee:a1:15:a2:
df:39:11:a6:b3:dc:39:3c:31:1e:ae:7d:c8:61:d6:28:f1:91:
90:01:db:8e:5e:dc:7a:a2:ec:f3:ad:15:92:12:6b:d0:23:70:
d8:04:b6:6d:1a:32:ef:23:3b:bd:5e:ab:87:03:96:df:e9:82:
bf:73:0d:10:85:88:9f:02:a9:1a:bc:4b:7a:81:99:60:2e:6d:
86:64:f3:af:14:20:74:33:51:f2:59:12:22:d2:da:f8:88:2f:
5f:07:55:d3:82:7a:e3:1b:3e:7d:94:6c:87:83:43:84:c6:c0:
18:7f:63:ac:ac:87:51:ab:c0:48:7d:55:ac:fd:02:51:d5:49:
3c:fb:3a:76:59:f7:12:c9:d5:e4:2a:36:06:87:7a:e8:a6:aa:
c5:00:21:27:e0:7b:e4:e0:f0:6d:68:3d:e7:e6:09:43:67:b8:
48:2d:4f:0d:93:b8:73:a2:00:82:39:24:32:b1:cf:b2:31:37:
99:c1:96:a1:60:bb:72:b2:dc:f6:44:78:94:df:78:80:e4:e7:
97:f8:9c:07:34:66:b9:2e:75:e3:5e:f0:aa:4d:ff:d3:f2:e5:
ac:42:a2:23
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAIGaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgzMTA3MTIyMFoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkFCM0MxMTAvBgNVBAUTKDgyNkI0NDc0QkM2RjRGM0JFNDBCNUU3
NTExRjEwNUNBRTdGRThDMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZ/rpqzA1PmjbTT51XJr0/ch+lLdGZNR0IwOMcAixXEmXx6jbryIh427kL08we
eyYKpd5pGMjDk1XVv0/GSSpnHFphw1QJdUg0SQkH+oef0RDemrq7VlmkbaOBUinZ
and6+wzkXJIrzCi3RLST3pDQ1/Z15jbC5Machf7Le76oRAqoL+SkD8nCKNZjU5SU
1TYvJFnlJsbR0OmA8F/AGCHSyR3vTVpLDLAqs2V0LBEmWg78m23lqiMEW/wonRxc
xTLpsMjr4yUVvtgwwhC3ZUdCHroIF6WdI1vd1/5T77rsaINITIWN5Q04qfQQXPzP
4AU3dJIdOB7H9OA2/rfgBTY9AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUgmtEdLxv
TzvkC151EfEFyuf+jAwwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZBQjNDLzk5MUVBREZFNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGQUIzQy85OTFFQURGRTY5NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9nbXRFZEx4
dlR6dmtDMTUxRWZFRnl1Zi1qQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAHAvFYwDQYJKoZIhvcNAQELBQADggEBAIzM+73XmNi38GJ6u67O
X2nULdCqvOwMUqhDBMC1EbWn7qEVot85Eaaz3Dk8MR6ufchh1ijxkZAB245e3Hqi
7POtFZISa9AjcNgEtm0aMu8jO71eq4cDlt/pgr9zDRCFiJ8CqRq8S3qBmWAubYZk
868UIHQzUfJZEiLS2viIL18HVdOCeuMbPn2UbIeDQ4TGwBh/Y6ysh1GrwEh9Vaz9
AlHVSTz7OnZZ9xLJ1eQqNgaHeuimqsUAISfge+Tg8G1oPefmCUNnuEgtTw2TuHOi
AII5JDKxz7IxN5nBlqFgu3Ky3PZEeJTfeIDk55f4nAc0ZrkudeNe8KpN/9Py5axC
oiM=
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:52:41 2026 by rpki-client