Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.cer (raw, json)
Hash identifier: vwE/GFtlxEnmulXO23Uhs2E55ZEXa5a1oQZRo1AwSJI=
Subject key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 796A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Apr 2026 13:19:56 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.28.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31082 (0x796a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 2 13:19:56 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:bd:90:89:a4:43:66:9f:a4:dc:02:be:e7:
1c:90:32:6e:df:25:e1:f6:41:80:86:ae:3a:c3:c8:
2c:b4:fa:62:17:a1:ad:29:77:c3:c6:dd:53:db:b9:
93:8b:2e:f8:ab:0d:b4:b6:a5:68:ce:98:97:c1:f9:
b3:92:4f:a8:65:a4:06:0b:bb:61:1b:ec:7e:91:f3:
b8:f2:2b:97:7b:c5:47:65:34:44:3f:05:2d:30:5f:
73:bc:aa:eb:80:da:7a:e9:27:aa:42:c8:e9:97:49:
e8:93:e8:1f:3f:ee:fd:d1:90:3f:17:96:c6:f4:cf:
a8:4c:09:a2:34:e4:bc:a4:c4:a0:43:20:41:a1:1a:
07:b6:ac:09:50:ec:3e:25:f6:15:e6:a9:99:07:2d:
68:c3:46:96:d9:7d:57:79:4c:ab:89:1b:7d:42:ba:
87:ec:0d:81:0c:31:6c:94:fd:a1:2a:4d:9b:10:9c:
57:e1:53:dc:e8:c4:de:e1:4c:55:2c:0c:18:ec:c2:
cd:35:f0:8a:13:db:eb:ae:86:df:90:e2:34:d7:6d:
8d:aa:1c:ba:3c:c2:c3:96:54:06:35:d0:0c:a2:4a:
66:11:52:cd:c7:44:c6:e0:36:b8:13:98:62:2e:45:
91:5e:06:91:46:c9:49:ec:c1:b8:3b:72:f3:dd:02:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.28.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ae:1e:04:96:1b:3c:64:d6:fa:b7:3e:1a:d9:bf:5a:f5:ef:
de:b7:d2:fa:58:ba:50:ac:f7:07:0a:d7:2a:90:39:dc:3e:8c:
06:99:37:0d:cf:03:d6:6a:f2:7e:f8:6c:16:de:8a:58:ea:47:
f5:a1:d8:a9:ec:8b:22:04:72:c1:69:83:7d:9a:92:6a:53:32:
19:21:e6:5a:99:27:43:a8:94:21:84:78:77:98:a2:13:b9:58:
80:c7:c5:4a:0b:b7:b7:b0:9b:c8:c5:93:6e:5c:09:b3:06:dc:
76:f8:5b:f6:9c:18:f6:41:4f:d5:86:39:6c:83:b5:8d:22:5b:
9e:d7:40:72:73:77:50:21:e2:2b:a9:9a:91:99:4c:36:24:b1:
be:2f:47:62:4e:f8:60:f4:70:a3:32:38:b4:78:1a:40:b6:3e:
e6:71:b6:72:77:a5:d7:a1:8f:c4:4c:00:05:11:c1:12:af:a5:
ce:59:6a:14:cc:db:31:ff:d7:56:b2:c3:91:fa:f7:75:ef:69:
8b:26:aa:95:2f:c2:86:9a:7e:6c:88:9e:78:a1:ac:c0:a2:cc:
34:c0:77:bb:0f:67:61:95:0c:5c:cb:52:d3:53:bb:c0:9a:f6:
64:48:8e:77:23:de:12:52:84:18:6e:3c:d2:3f:64:3a:23:2d:
f7:35:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:26 2026 by rpki-client