Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
File: oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer (raw, json)
Hash identifier: i0mvCv9BCkAZJXiyet6dSMMrqd+2TZuhoLyOP3Lqqlw=
Subject key identifier: A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4BC4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Sep 2026 02:10:25 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 179.239.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19396 (0x4bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Sep 15 02:10:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91AE954, serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:40:64:17:65:a0:bf:49:cb:f7:95:9a:b7:
dc:fd:03:c4:5d:a7:16:48:8c:04:95:5f:7b:59:79:
ef:1e:1c:a1:61:32:d8:8c:38:35:ed:0d:ce:72:a9:
59:59:bb:68:46:20:bb:0d:4a:34:56:3f:f2:08:cc:
78:69:ed:64:2e:ce:6b:eb:d2:55:ef:be:d2:e9:cc:
d9:c8:a1:2b:35:81:f4:94:85:51:75:b8:4e:ac:58:
57:5a:72:cf:b2:3d:0d:58:ab:2d:be:3a:09:aa:c0:
56:18:04:a5:b6:bf:fe:09:70:bd:6e:cf:da:b7:2b:
ba:0e:b5:22:fe:e9:1e:66:a6:37:0c:22:5a:bf:b9:
91:cb:b4:cf:7b:b3:fd:ac:7b:af:91:21:19:80:5c:
f4:6d:bf:c4:91:5c:14:80:1a:09:f3:96:5c:11:a6:
40:5f:93:47:a8:d2:98:e2:a0:c1:4b:43:4b:23:18:
1d:c6:fe:17:1e:cc:6e:c9:07:05:3b:94:5a:b8:b6:
2d:ee:75:d8:5a:ed:26:da:e4:88:7d:ee:33:47:3d:
f5:3c:b4:e7:25:ee:0d:2d:d8:b1:93:b8:80:cb:1a:
31:8c:a0:e4:b6:55:df:89:48:56:fb:15:f7:99:f1:
c7:35:db:c1:dd:3a:47:0a:71:74:fb:f2:a8:ca:c2:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
179.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:cb:e5:5c:62:f2:ec:a1:4a:9f:f8:47:52:b5:ae:16:3d:6c:
fc:7c:a7:cf:bc:2d:c4:0e:e6:ab:2b:a7:a2:8f:c7:75:95:95:
0a:61:c5:03:d4:8e:a5:da:09:35:c9:fd:0f:29:82:c9:3b:95:
1c:44:a3:ac:9a:4d:31:24:bc:45:40:b0:b7:36:45:04:5f:3a:
95:43:f5:40:c2:96:18:d5:25:39:a1:7f:c9:de:e7:24:87:8d:
66:8e:4f:ba:dc:d5:a6:36:01:2c:56:f0:ff:1a:8d:b3:05:a6:
91:79:d0:14:01:94:f2:c1:15:74:59:91:8c:2a:02:fa:d1:ba:
ec:23:cb:a6:04:97:c9:c2:57:f8:37:e7:e7:83:4b:97:4e:ea:
34:e3:81:4d:f7:38:f2:55:6e:1c:dd:f6:f3:24:cf:84:6f:f2:
d1:c2:a0:7a:a1:2f:c8:68:f2:af:eb:cc:31:32:bb:af:e4:2c:
d9:b5:b4:58:4d:d8:9f:c4:69:a9:9c:67:e0:67:e8:42:a2:66:
5f:fc:43:04:e0:1e:99:f2:16:9d:bd:19:7f:5c:c1:df:ec:78:
57:6e:14:34:85:63:ee:00:97:dc:50:c7:28:37:c5:f6:dc:c8:
24:08:d8:bf:c3:8b:36:61:43:27:ad:22:fb:6c:6d:e9:8b:9f:
33:a8:9e:a6
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICS8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0
OTRCQUY5MzkwHhcNMjYwOTE1MDIxMDI1WhcNMjcwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBRTk1NDExMC8GA1UEBRMoQTAyODI3N0M5NzA4NDdEM0Q4QzY4RjhC
NzQ2OEYzRjI2QzcyRkVGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJezQGQXZaC/Scv3lZq33P0DxF2nFkiMBJVfe1l57x4coWEy2Iw4Ne0NznKpWVm7
aEYguw1KNFY/8gjMeGntZC7Oa+vSVe++0unM2cihKzWB9JSFUXW4TqxYV1pyz7I9
DVirLb46CarAVhgEpba//glwvW7P2rcrug61Iv7pHmamNwwiWr+5kcu0z3uz/ax7
r5EhGYBc9G2/xJFcFIAaCfOWXBGmQF+TR6jSmOKgwUtDSyMYHcb+Fx7MbskHBTuU
Wri2Le512FrtJtrkiH3uM0c99Ty05yXuDS3YsZO4gMsaMYyg5LZV34lIVvsV95nx
xzXbwd06RwpxdPvyqMrC8PkCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBSgKCd8lwhH
09jGj4t0aPPybHL+8zAfBgNVHSMEGDAWgBSWqF70uMr11MNaFX9OEl7klLr5OTAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2
MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRr
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUU5NTQvOUFFQ0MzNTJCMEFBMTFGMUI5MjIyM0M5QTdFRTUyOEUvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFFOTU0LzlBRUNDMzUyQjBBQTExRjFCOTIyMjNDOUE3RUU1MjhFL29DZ25mSmNJ
UjlQWXhvLUxkR2p6OG14eV92TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDALPvMA0GCSqGSIb3DQEBCwUAA4IBAQCqy+VcYvLsoUqf+EdSta4W
PWz8fKfPvC3EDuarK6eij8d1lZUKYcUD1I6l2gk1yf0PKYLJO5UcRKOsmk0xJLxF
QLC3NkUEXzqVQ/VAwpYY1SU5oX/J3uckh41mjk+63NWmNgEsVvD/Go2zBaaRedAU
AZTywRV0WZGMKgL60brsI8umBJfJwlf4N+fng0uXTuo044FN9zjyVW4c3fbzJM+E
b/LRwqB6oS/IaPKv68wxMruv5CzZtbRYTdifxGmpnGfgZ+hComZf/EME4B6Z8had
vRl/XMHf7HhXbhQ0hWPuAJfcUMcoN8X23MgkCNi/w4s2YUMnrSL7bG3pi58zqJ6m
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:04 2026 by rpki-client