Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
File: mAzlu_LPNdYK47ByGKtcqRAULJA.cer (raw, json)
Hash identifier: 2AkOZzgSnjOEJ6Nf2+3vLkhapoc1U0IA6ETzjZtrmes=
Subject key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8213
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Sep 2026 05:49:36 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33299 (0x8213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 9 05:49:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:f7:fc:76:5f:7e:16:05:6c:f9:1b:93:58:
c5:33:07:70:3d:10:9c:5b:12:23:44:e4:56:a3:8b:
21:6c:7a:41:b5:08:71:6d:47:bf:7e:75:b3:a9:61:
f2:7e:13:62:41:65:2c:96:f9:9b:35:e3:70:76:84:
fb:32:64:f2:04:d3:ef:cf:d2:31:94:6f:6f:5c:bd:
cf:94:0a:ae:6b:96:a6:5f:35:c6:17:d2:fa:fd:c7:
60:1c:a1:fd:c0:94:f2:67:bc:9a:48:ce:b8:8b:0f:
f3:fc:bc:62:0e:85:6b:ed:ea:8d:b7:6e:18:0c:f6:
2d:2a:3b:f4:8a:e0:b0:7c:50:ca:85:74:9d:11:9a:
bd:96:eb:cc:8a:24:a6:f1:f7:8f:37:43:12:b0:99:
52:8a:1b:c4:30:a5:87:e8:5d:4b:f3:88:c3:75:1c:
3c:4c:a5:4a:3d:12:fd:7b:55:c8:9e:be:16:05:8d:
1a:02:71:41:73:a8:f3:56:88:5c:23:c1:2d:b7:a4:
17:f5:f8:cc:84:e2:73:c5:01:80:4f:3c:82:13:64:
6d:a5:c1:fc:ff:a1:bc:d3:ec:21:4f:53:c2:ef:21:
d0:6e:c2:0a:0e:b6:f8:07:b0:ad:bc:01:5f:60:15:
bc:61:45:e8:f4:bb:8b:a8:02:7b:fb:c4:64:a2:55:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.180.0/23
Signature Algorithm: sha256WithRSAEncryption
71:e3:45:df:36:8f:7c:e6:dd:d4:85:b1:21:21:16:83:22:03:
3d:a8:78:34:3f:00:e3:97:61:51:eb:13:1d:a1:4f:fa:91:51:
9a:af:51:db:d3:ea:53:ba:d8:f4:08:9c:1a:64:e4:f5:a3:d8:
82:07:1f:f6:16:eb:ca:82:69:e3:d9:61:c7:47:d3:34:b7:93:
c3:c9:9b:cc:a1:37:1f:75:8d:4c:33:95:d4:ca:f8:da:d2:20:
e0:d5:f8:45:e5:5c:c8:44:3f:0d:66:2d:72:1a:82:d1:31:17:
c0:e4:ac:a9:6c:fb:90:c4:80:15:2e:8d:86:f3:61:40:ef:de:
69:66:36:a1:4d:33:83:0e:73:f6:cb:fe:4e:77:e5:c9:0d:12:
4f:28:12:44:85:5e:b0:98:07:90:8d:ec:a6:8c:ca:07:83:a6:
8c:59:e4:8a:81:22:76:cb:ef:60:06:0f:c7:2d:92:69:44:f7:
67:1e:9f:75:b3:02:e8:06:ab:91:19:66:11:62:5d:6f:54:13:
28:23:2e:45:22:32:11:45:07:16:62:a1:77:6e:4e:a5:3a:3a:
a4:47:3d:7d:28:fe:20:35:70:10:e1:3f:04:f8:07:a0:40:e4:
fa:ef:84:fc:80:e8:09:48:f2:2a:ba:bf:c4:40:01:22:6c:4e:
a9:b1:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:09:38 2026 by rpki-client