Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
File: lfCdXluLzW9LTWm1yTbJEvd9LP0.cer (raw, json)
Hash identifier: 1xrKS1X6NsZgpWJFsiuc2W4jrm2fkpQ3LjQ2WY4ZQRc=
Subject key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8458
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Nov 2026 14:32:17 +0000
Certificate not after: Mon 01 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.212.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33880 (0x8458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 1 14:32:17 2026 GMT
Not After : Mar 1 00:00:00 2027 GMT
Subject: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:3f:a4:59:6a:13:6e:b1:7b:b5:25:87:9b:
08:2a:6a:6f:de:f0:7d:c8:82:7e:a3:43:d3:f7:db:
fe:d3:a2:5b:d1:ec:a8:2f:38:cc:d0:70:dc:61:a1:
ae:29:c1:6e:ec:4d:94:9e:21:69:ca:8e:54:a3:3e:
29:32:f1:ed:9f:59:a0:4c:49:9f:7d:ae:cb:3e:f1:
46:57:27:44:2e:ae:22:2a:24:2e:71:ce:06:ab:c4:
37:94:ad:ae:a2:c5:83:a3:71:e1:90:0c:70:93:6d:
18:c5:34:b1:2d:e2:07:f3:20:0d:d1:54:4a:a5:fe:
fb:04:60:7f:51:e7:60:a3:07:f7:e0:83:bb:a4:74:
24:8a:d2:40:4f:2b:7b:42:ca:e6:bd:68:1d:06:54:
78:e4:1e:ed:2f:ab:ca:d5:b7:db:33:96:db:4c:05:
a8:20:36:2c:0d:3b:2f:70:58:2f:3e:16:58:cb:cf:
e7:4e:a7:b4:54:49:05:55:4b:15:01:53:f7:00:33:
e6:a4:11:35:22:fe:bf:06:38:87:68:ef:a2:c2:9d:
e5:b3:6e:91:8c:9c:39:40:58:93:0a:2d:79:88:47:
b5:d2:1d:6b:e8:cd:d9:73:f5:0a:e9:78:dc:46:05:
c3:af:00:fc:7e:97:13:d6:6c:57:a5:38:77:aa:2f:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:35:f8:41:2a:7d:db:23:0d:16:72:12:cd:cd:e7:24:77:be:
ac:f5:95:ad:ea:d1:f8:e4:07:a1:20:24:66:b0:20:aa:5a:53:
f4:a0:f5:27:f7:6f:b5:34:bd:d5:85:11:3c:ce:a6:3c:19:13:
ca:bd:0f:aa:ea:a4:bd:4b:0f:99:a7:03:02:f3:38:b1:47:a1:
0f:2e:76:2b:c3:3a:2b:18:26:d0:0a:01:0a:48:5a:60:e4:3b:
64:db:bf:0d:66:b7:3f:b4:48:d5:c0:80:00:c1:50:92:3c:d7:
28:d4:4d:e2:8d:5f:b9:2a:70:a0:8d:60:60:5d:f0:9e:06:ca:
12:93:4f:cc:5c:85:47:f7:68:4e:5b:9b:b8:53:22:94:b3:84:
00:49:5d:84:81:31:4e:aa:9e:c2:2b:7f:bf:09:37:57:b2:47:
17:8f:b8:29:3b:1a:16:3a:51:2d:85:33:7a:66:99:f3:c5:54:
83:2b:6b:13:a9:c3:46:65:86:a5:e3:fc:62:f4:3e:b2:6b:63:
51:22:3c:9e:b2:29:20:0a:f1:7c:d9:bd:97:eb:71:78:ad:70:
5c:20:f0:33:be:8f:50:52:34:c2:71:17:1e:29:6c:05:a4:19:
a4:80:bd:5b:1d:c4:be:cb:bf:50:55:09:81:92:56:75:1d:5a:
98:3f:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:29:26 2026 by rpki-client