Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer (raw, json)
Hash identifier: qBtKUhj+LZfngLOtAFJmmBK8yp7voyL3rpQZ5ZVJHxo=
Subject key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C5B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jun 2026 15:08:10 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 22672
IP: 45.74.128.0/20
IP: 157.85.72.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 10:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31835 (0x7c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 3 15:08:10 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:07:85:1b:f2:ba:ed:34:97:32:44:db:d7:
3c:6c:6c:82:27:68:37:bb:55:ef:00:94:f6:5f:be:
bc:79:c8:0a:3d:27:52:b0:f8:99:0a:d1:5b:43:e2:
8a:00:df:ac:25:78:82:b6:78:4f:a2:d0:a6:50:91:
e8:c6:cd:86:9a:61:8c:37:7a:3c:8e:fa:4e:e3:47:
71:ed:a5:26:a8:18:3e:49:d8:61:06:4a:69:aa:7e:
4e:fb:2f:d7:13:16:95:47:ab:58:a3:3b:67:b1:1a:
b9:53:44:a3:c1:b0:33:2f:42:f5:fc:f8:a6:be:eb:
0a:7c:4c:a2:b2:4a:67:25:fe:cc:3a:88:18:63:ed:
f9:60:6e:49:5a:7d:94:83:41:b3:11:48:8c:08:e6:
ee:5c:cf:c4:27:89:ad:fb:da:4d:04:12:33:01:32:
63:87:95:d0:9e:b8:fb:c4:2f:16:5c:9d:0a:96:0a:
60:7e:26:05:af:55:07:ee:0c:87:7a:b8:d6:24:06:
0f:e0:4c:ec:53:a3:49:bf:94:f5:3b:05:e5:3d:de:
95:aa:b7:36:18:3a:d4:17:50:9b:51:1c:d3:1e:d1:
d8:cd:57:c5:96:cd:b9:65:71:04:c8:23:aa:2a:f4:
9a:f5:da:e8:91:f3:2e:d5:3e:dc:ae:ab:6e:cb:84:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22672
sbgp-ipAddrBlock: critical
IPv4:
45.74.128.0/20
157.85.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:8c:af:dc:de:60:64:d1:dc:3a:e3:e2:32:7c:b0:68:bf:d6:
3a:2d:65:77:8e:91:00:c0:b8:d3:0d:a8:cd:48:c5:75:0f:01:
a2:48:15:06:ac:9e:87:00:bc:0f:78:53:09:a8:e7:6c:4b:f8:
ff:9f:37:52:c8:25:4e:e2:17:a8:5d:87:5d:fe:7f:98:9f:fc:
80:f4:97:c6:ae:b3:1b:89:bf:3e:6c:40:ae:59:82:ba:f8:26:
18:0b:16:09:31:05:cd:e0:96:01:c5:5a:07:d7:16:20:09:71:
00:28:e1:33:15:c4:13:36:ed:c9:6c:94:09:46:4a:04:47:fe:
c0:14:66:ee:2d:b5:cd:d6:c7:4a:70:71:95:3f:1b:92:a0:60:
9c:b8:7a:98:d5:c6:0e:d4:3e:99:8c:bd:43:f8:66:b4:d0:c8:
c6:35:0e:88:9b:bf:63:8f:a5:55:49:fc:bf:d5:13:92:80:64:
92:f5:08:8a:16:1c:3d:e7:ac:7c:47:16:bd:2c:90:53:44:a4:
97:d9:ba:94:57:ce:08:c8:9d:57:85:37:8a:8e:75:fd:2e:71:
f5:3f:1e:24:23:ac:d2:b3:4c:9d:57:93:ea:37:90:b6:3e:b5:
d0:41:8b:ca:8a:bd:3c:63:2c:73:c0:a5:de:67:1a:2b:c8:5c:
e6:c8:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:30 2026 by rpki-client