Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
File: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer (raw, json)
Hash identifier: YEQhiLbWg8GFpk0dnMcr1wBydOuTbTRl2LEHE/mpzGE=
Subject key identifier: D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8252
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 12:35:22 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33362 (0x8252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 16 12:35:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A912C2EB, serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:9e:5f:2b:23:c4:8a:7c:bf:d8:33:32:62:
83:b2:a3:6a:aa:d8:cd:92:bd:76:06:78:dc:5b:61:
ab:b0:08:52:5b:c1:b7:73:5b:06:2c:2f:5c:4c:d7:
3c:80:23:20:8d:28:ca:b1:eb:c0:77:cd:29:9a:3f:
1a:08:20:82:a6:1f:09:6a:a6:1b:35:46:60:91:89:
94:a3:53:e3:f4:80:60:95:89:af:e0:d5:5a:0e:9b:
ee:89:3d:2e:2b:d3:b4:c5:b4:41:c0:21:fa:9b:e8:
16:03:a3:68:67:c1:62:89:40:f8:d4:7a:4c:52:10:
7f:b6:e4:ec:1c:99:c7:1b:29:3b:06:01:f7:fc:aa:
87:18:97:10:4e:94:25:9a:2f:8d:4b:22:42:da:18:
17:f5:61:f8:36:16:0f:49:4d:bf:e3:9a:8d:ab:65:
71:b5:46:e8:50:c9:bc:59:c5:59:52:a0:83:14:5e:
d5:0c:c4:f7:37:9c:d0:fd:3a:f3:e9:a7:56:0d:46:
a1:01:c4:39:05:1c:d7:8f:f7:5b:c5:63:3c:24:bf:
b3:f0:00:04:26:12:bd:51:85:4c:3b:93:6f:82:29:
4a:e0:8d:6e:85:d6:13:17:86:83:68:2c:bf:4d:4a:
ec:a7:41:e7:52:91:46:f0:e1:52:ca:c4:70:ac:66:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.226.0/23
Signature Algorithm: sha256WithRSAEncryption
31:f0:1e:a0:c5:58:8a:38:44:22:6b:6a:98:d0:6a:d9:00:6f:
43:b7:1c:62:8e:99:e9:2b:bd:7d:ec:70:70:94:db:50:b9:07:
0a:cb:13:ec:23:21:16:b4:79:6f:19:72:cc:ac:22:fa:3d:74:
16:df:f6:d2:bf:83:39:2d:82:5c:65:29:23:6c:de:ca:ee:c1:
cc:75:22:01:df:8f:33:6b:a7:a6:86:3d:e5:65:1b:df:ec:6a:
8a:78:53:5c:dc:92:8f:e3:0b:ce:d7:c8:4b:5e:2b:28:4c:90:
ce:17:53:fc:97:ce:44:19:6e:ce:68:4f:6f:60:4b:3a:e0:c2:
52:c7:15:45:e6:22:c6:53:6d:31:b9:82:1d:b9:8c:bb:f0:a3:
39:a1:90:fe:5e:34:fe:3a:be:dc:ba:dc:f4:f5:f0:56:e6:62:
e5:59:73:7f:32:98:14:ef:6c:a6:cb:5f:95:1e:e1:84:80:d1:
14:aa:6c:74:4e:85:eb:83:c4:a8:5a:df:8a:94:03:ce:07:c7:
12:cb:1f:a6:93:61:ee:24:f0:82:f9:20:7f:2b:1d:61:d3:ce:
b0:db:63:c1:8c:82:19:d0:e1:6c:d5:d1:74:42:e1:4b:c9:b5:
c4:77:7b:8a:80:f8:4f:4c:14:ba:4e:6c:c2:f6:e4:da:f9:51:
f8:87:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:50:32 2026 by rpki-client