Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rGothu4NhYE3zmxNhVzk-qotuJQ.cer
File: rGothu4NhYE3zmxNhVzk-qotuJQ.cer (raw, json)
Hash identifier: lrdXIuCnYDi8JyTxErabDPAqMBMW6XGLpwPdwdpOVVQ=
Subject key identifier: AC:6A:2D:86:EE:0D:85:81:37:CE:6C:4D:85:5C:E4:FA:AA:2D:B8:94
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 83C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/rGothu4NhYE3zmxNhVzk-qotuJQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 Oct 2026 01:31:18 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 168.217.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33728 (0x83c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 20 01:31:18 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9116882, serialNumber=AC6A2D86EE0D858137CE6C4D855CE4FAAA2DB894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:ab:aa:f1:f0:df:e6:b4:c5:76:71:ed:3b:
31:7e:bb:ce:45:f6:ae:34:ec:aa:64:08:83:4c:22:
07:3d:7a:db:90:2f:9b:7b:48:5a:e4:3f:08:42:1b:
c7:b3:44:39:e4:9f:e7:9d:4f:90:1f:80:6d:a8:f5:
ca:a9:a7:86:62:9f:a4:7c:7d:94:53:7f:64:48:fe:
32:7d:02:fa:7a:1c:db:c9:84:e0:36:33:29:3b:75:
6a:b1:ff:a1:c8:8b:28:36:93:03:82:0e:26:3e:7b:
ec:2f:da:87:bb:86:a8:a2:64:39:3a:5e:b0:eb:71:
03:3d:9c:12:1b:33:3e:ea:1e:0b:e3:a2:c9:bb:88:
96:e3:ff:28:39:47:63:f8:67:89:9a:d7:69:63:70:
bd:d5:81:33:09:57:da:a9:dd:0c:97:bb:bf:b9:c2:
24:4e:3b:37:10:a1:ce:a0:24:41:83:31:8a:cf:8d:
60:3b:05:57:4b:ad:05:14:02:47:ea:5b:16:55:0b:
ec:35:de:96:fa:cd:d7:7b:00:1d:19:a0:ff:55:cb:
48:85:3b:89:47:a8:e8:8b:2f:b9:81:2a:56:38:7b:
54:60:0d:d7:43:ca:01:77:f9:ae:26:00:e5:94:be:
3a:5b:88:a2:10:2f:8e:84:ae:aa:3f:58:25:bb:17:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:2D:86:EE:0D:85:81:37:CE:6C:4D:85:5C:E4:FA:AA:2D:B8:94
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/rGothu4NhYE3zmxNhVzk-qotuJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:18:43:b9:7e:f6:64:1e:f0:e4:cf:3c:d2:75:0f:7b:30:97:
35:09:43:0f:6f:44:47:7a:e1:bb:e1:d3:32:49:0f:a6:54:2a:
a6:a9:50:ab:cb:88:2d:49:5b:52:c9:7f:eb:60:6a:88:d9:24:
3e:35:e5:82:07:4c:04:08:13:56:87:b1:80:5d:ad:83:0e:8c:
35:b1:0c:e0:cb:57:a5:2c:e5:e1:3a:ca:e1:da:55:52:73:ab:
10:04:23:fe:a9:29:18:d9:db:21:fb:96:7e:0c:42:5f:96:7d:
10:5f:36:77:cc:d0:2f:cc:07:71:00:9e:59:e6:d5:2f:53:a0:
6a:6e:1c:d2:4e:aa:ca:7a:1f:44:1f:22:76:28:0e:fb:65:72:
25:88:56:4d:8d:8c:f1:a8:bd:5e:ba:9a:68:7f:e3:70:48:84:
a3:59:4c:26:9d:3c:e6:28:c0:33:77:9b:57:66:8b:1b:e0:6e:
85:2c:b1:c0:15:42:0c:35:71:14:ac:6e:f4:0a:1c:23:37:bb:
c9:35:68:2c:a4:c6:c1:5a:6a:e8:37:98:76:56:05:84:9d:eb:
18:8d:0d:de:32:d9:45:40:12:57:c4:14:57:4c:04:38:0e:31:
fb:24:2f:16:b0:c9:39:b0:9b:60:fa:e5:3f:7b:37:2e:15:86:
3c:f4:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:49 2026 by rpki-client