Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer (raw, json)
Hash identifier: m7GkHky/Zz1/NLsKmRL8SnUFPZ8nh0unzRh4gKoIsSU=
Subject key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7FAE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jul 2026 15:05:20 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.196.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32686 (0x7fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 29 15:05:20 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:b1:25:7e:e2:5f:7a:50:9e:b9:6f:e9:ac:
fc:86:fb:c1:14:7c:61:22:25:89:9f:77:d5:14:35:
0b:ce:46:53:b2:9e:e5:90:a2:50:cd:00:c3:1d:e3:
ff:c6:39:52:37:8a:4a:fe:51:78:46:0d:b6:28:e4:
37:d8:f2:72:90:13:93:51:a3:ec:d8:2a:2f:30:af:
6e:27:f0:5e:02:43:7f:1a:c4:12:24:6d:fc:d7:4b:
0b:04:41:4a:17:51:5d:56:75:5e:8a:16:ea:83:cf:
0b:17:0a:be:27:89:e6:d9:00:48:3c:6c:ae:3e:4f:
a4:c1:8e:de:d3:2b:6f:33:c1:a2:2a:af:ca:59:a1:
e5:72:e5:0a:a4:6a:1a:7a:3c:82:f6:27:4c:b1:8c:
0f:ca:8a:55:b0:a3:da:c5:f5:6c:c8:b9:a6:a1:d1:
e3:e2:d1:d7:2f:3c:7b:b6:25:45:8b:d8:ea:39:9b:
72:b0:26:2a:f4:9a:75:61:2e:f3:31:fa:56:ee:78:
bd:bf:14:3f:b6:f7:2c:92:dc:d4:fd:6d:87:cd:11:
e1:e3:52:3e:a6:7b:ec:bc:cc:25:dd:5c:08:1a:59:
53:4f:02:f5:7a:89:48:0a:95:05:41:f6:e2:a6:57:
ba:2f:50:f2:44:80:3d:c8:72:32:72:c7:d3:0d:ed:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.196.0/23
Signature Algorithm: sha256WithRSAEncryption
75:97:ba:f3:55:23:c5:5c:a5:b3:2b:51:03:9a:21:ee:06:c1:
8c:c3:25:ce:95:37:6d:6a:c4:32:c3:5d:2b:9c:2e:cc:6e:88:
c4:1b:c9:da:b3:db:d6:05:d3:5e:fe:7c:98:ba:d9:7c:87:0e:
10:c5:e1:a0:92:e0:db:cb:5d:42:d4:85:99:a9:31:f1:5f:c3:
c3:e7:2a:47:9b:0a:6a:8d:d1:ad:71:5a:18:00:73:a5:54:c2:
a4:da:12:4f:b3:6f:46:16:7b:aa:3b:31:df:3e:fc:a9:5a:5c:
97:f5:79:43:58:57:9c:72:03:d8:d6:ec:f2:cc:9b:ec:91:b0:
4d:25:37:61:14:ec:7a:06:b2:d3:eb:99:56:26:01:31:7d:fa:
8d:2d:17:3a:a3:ea:f4:44:92:c7:37:fd:d2:2c:36:ca:ed:4c:
03:2f:41:c3:2f:13:ca:b0:c1:16:28:72:de:a5:d1:ce:fe:54:
2d:ed:63:33:74:a4:ba:7b:12:03:11:e0:c0:35:51:a5:4f:60:
44:b6:1d:1a:77:a2:54:e7:72:64:73:1b:73:47:9c:9c:e3:55:
83:f7:68:1d:de:8c:2b:2e:a8:07:68:fc:2c:d8:4d:95:02:7e:
47:c8:12:05:86:8f:ec:ce:f7:2d:4a:d3:94:80:10:bf:2b:33:
a9:71:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:27:10 2026 by rpki-client