Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
File: wtbHmmd8l-xwBjE76RZ-DeZspFI.cer (raw, json)
Hash identifier: MvG5GPB4lkfRlydLgKCvhVAUuStkv1GvYyU7MxeWWfY=
Subject key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8289
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 07:08:48 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: IP: 138.252.112.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33417 (0x8289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 21 07:08:48 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ac:b1:5e:cc:44:31:86:cc:c8:9b:5d:5a:6c:
20:0e:12:29:b8:c1:32:7e:7b:ba:93:49:a9:b0:b0:
0f:37:8e:e9:71:c3:cc:b5:57:89:1f:aa:9d:ce:1b:
29:b5:a2:11:34:ef:4c:12:80:86:73:ac:05:1f:2b:
59:8d:fb:c1:d1:38:b3:15:59:5b:09:ce:9f:44:42:
cb:0a:9c:21:44:db:a8:a8:b0:05:17:3d:75:87:ed:
c9:d9:a0:5a:d8:1c:f6:b9:83:5b:ed:3b:32:ea:9f:
e8:2d:e1:d5:02:90:32:26:a4:37:97:6a:7d:c0:cc:
d6:85:ee:d4:84:de:a4:4d:1a:2b:41:6b:04:f2:72:
41:da:c3:5b:4c:47:fd:d0:c0:2f:60:15:80:48:12:
61:87:16:ef:e9:8e:94:bd:fc:4b:71:1d:b6:ed:43:
b7:fa:31:35:ed:72:a9:41:28:d3:76:70:29:73:e5:
1c:de:73:ad:62:9c:bd:ce:12:01:1a:0d:3f:1e:f7:
5a:4f:76:53:58:f8:3c:6b:d2:01:53:f4:4f:69:04:
8e:ea:1d:57:54:17:d4:41:e1:0b:0e:d6:ca:0c:42:
f8:ff:b4:25:fd:b7:9e:4c:31:c7:41:04:6b:d9:2f:
88:50:3a:1c:55:9c:ba:c8:52:d7:84:08:49:64:8d:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:16:00:cf:b3:27:23:41:38:ea:e7:91:26:bf:3d:8c:ae:69:
6d:7c:59:c8:b0:95:73:3b:04:1c:8c:8e:9e:ce:5c:75:53:c7:
3f:3a:0c:ec:b2:00:64:12:ea:d9:e7:19:d3:60:97:c2:1d:ca:
82:4d:19:f7:98:52:f5:69:76:d8:76:c6:d0:11:c0:ae:4b:8d:
b9:e2:e1:1c:bf:e3:6d:96:d0:d1:06:11:0e:e3:7d:1a:17:55:
c0:b0:67:df:a9:f6:cd:59:6e:10:34:15:c7:d5:71:a2:fa:8a:
cf:63:40:58:c7:0a:13:96:97:49:f9:f4:02:0a:66:ad:75:c2:
b4:fb:1a:a4:99:0f:b1:45:69:c8:a9:f5:5c:06:95:f2:4e:83:
e7:5f:91:f5:21:4f:7d:15:c8:4a:d4:f2:53:fd:8d:53:7a:83:
3f:cf:bf:72:c9:59:6d:a1:7b:fe:d8:1b:e9:41:ab:8d:0f:5a:
0a:5b:19:21:aa:1d:b3:3f:5b:4e:e7:25:6d:7e:7a:6b:b3:2f:
b2:cd:c4:51:5c:96:3d:20:4b:c2:41:f8:a6:e6:9f:cd:d9:62:
e3:57:b2:40:d4:8b:4c:49:7e:b7:0c:ef:40:08:89:fb:84:35:
17:b8:01:9a:6d:29:93:73:48:ec:a7:80:5f:1a:be:54:ac:32:
8d:0b:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:42:08 2026 by rpki-client