Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (raw, json)
Hash identifier: BH/FRxhYgE+v5+WE2GNEUCiZazOjIIn0k6v2ud3DD3s=
Subject key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4A52
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:01:52 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 154.8.64.0 -- 154.8.119.255
IP: 154.8.124.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19026 (0x4a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Feb 27 03:01:52 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:e6:5e:79:19:0c:eb:25:43:58:a4:6c:69:
3c:1b:b1:76:40:04:59:1b:10:96:c5:9a:ff:38:6a:
00:ac:27:6a:42:e0:1e:31:62:32:bf:a5:0a:16:c6:
ae:fd:f1:21:70:77:4a:aa:76:51:5e:05:59:e0:5d:
c7:bd:9e:f3:c2:b7:a3:dd:f4:2a:ce:6c:b9:dd:0d:
4e:91:28:62:6a:4d:42:0a:62:da:f9:da:68:2b:dd:
f7:3a:e7:c6:c9:4d:d7:96:22:7c:60:66:18:92:0e:
ba:d9:5f:b9:c9:87:86:90:5d:1d:b7:0f:cd:f2:8f:
36:50:56:fe:07:bc:ca:13:8f:4c:68:9f:2c:44:c5:
ac:06:6c:3e:d4:10:a0:2c:2d:e8:f7:87:0a:31:c3:
3a:bb:56:45:a7:96:06:32:9a:42:3a:b0:7e:bd:fa:
6e:d3:53:2d:01:9d:70:d9:13:fe:86:9d:6a:85:72:
4a:8d:54:5e:64:74:63:1c:25:5f:9a:d1:57:67:8c:
5e:37:f9:67:00:ef:e4:77:28:a4:ad:c7:d0:d7:f8:
c0:40:9e:a5:95:4a:c6:97:4d:c5:f2:9a:ea:db:42:
27:86:c6:dd:ad:97:f9:c0:5f:59:c0:e9:af:3e:2a:
5e:94:1d:ec:be:ef:7d:ab:84:29:b3:77:3f:0f:4c:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.64.0-154.8.119.255
154.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
21:76:80:d0:2e:5b:e7:c5:ed:cf:c7:ac:7a:87:2b:29:b5:ef:
0a:38:b6:44:58:c7:d3:4c:f9:9c:13:62:70:5a:38:89:cc:b6:
5c:bf:19:f2:25:5c:a6:74:9f:64:c0:7a:f5:ae:93:26:75:aa:
7c:ff:04:70:51:42:28:cb:55:c7:6a:60:3e:ff:04:96:94:72:
fe:f0:f2:47:f4:b2:1f:81:3a:f0:52:36:48:83:89:0c:31:4e:
24:3d:d9:9c:76:07:65:64:24:ab:2b:4b:00:20:41:2e:4a:3c:
23:34:ed:2c:71:16:d7:0e:d4:06:90:bd:96:d9:87:a2:5e:0f:
85:a1:20:49:e3:37:f2:dc:8f:19:55:01:50:89:04:01:7b:cd:
46:9d:ba:f2:84:b4:90:e0:3e:6d:f9:fc:f4:e3:8b:4d:ae:b0:
48:e0:31:a9:aa:bc:e7:c2:50:64:76:d9:ea:18:4e:f9:c1:18:
3f:00:58:6f:8c:da:85:51:c2:63:35:dc:e4:cc:c1:32:0b:7f:
ad:6d:94:2a:66:20:b3:20:ad:00:c4:92:b2:2d:62:be:30:ad:
a7:27:8b:20:07:e0:70:31:5f:06:c3:c6:24:9c:8c:9d:14:91:
fd:ef:b5:5a:a7:f6:90:2a:d6:10:e4:70:cb:08:e0:88:86:e3:
4c:9f:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:55 2026 by rpki-client