
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.cer (raw, json)
Hash identifier: AKdraxQJ2xKzKQdVOz9Cg6xW+vV1s7jW4mBD0IHYm90=
Subject key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A4A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Apr 2026 13:07:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 64.119.16.0/20
IP: 66.181.160.0/19
IP: 192.82.64.0/20
IP: 192.82.92.0/22
IP: 192.82.100.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31306 (0x7a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 27 13:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:2f:f0:f5:0f:22:45:50:29:45:c6:bd:19:
ab:c1:1f:be:c1:15:0a:d9:eb:19:95:89:92:dc:9a:
70:3f:f0:63:6b:dd:48:e6:4c:6c:79:82:6b:a2:dc:
d6:ff:26:12:2a:fa:dc:8a:63:d3:d9:4b:0d:a0:24:
8e:e2:62:c6:27:79:66:d2:a3:e5:16:d2:18:5e:56:
30:87:28:1f:af:25:6d:db:12:d1:8c:07:fe:b9:93:
e6:d4:d6:42:af:4f:df:f6:43:cd:2a:f0:48:df:1a:
0f:29:5f:6c:07:a7:ea:4e:9d:d7:96:de:61:c6:d8:
eb:54:f8:cf:35:2c:83:e8:d0:b7:e4:1e:6a:b2:61:
97:a8:8a:2e:63:97:68:97:21:28:a7:74:50:4f:3c:
65:e4:aa:85:75:76:a7:b6:9b:dc:b4:ad:26:f7:df:
47:d6:14:4c:5f:5a:f9:f8:32:68:0b:9b:0c:6d:3e:
42:ec:17:79:81:03:08:53:83:09:c2:14:8f:4e:08:
64:11:a1:9b:bb:4d:01:4d:a8:65:a3:1f:0e:6e:79:
d9:1e:ff:4d:7d:f6:8c:2d:bd:9b:7c:00:26:06:c2:
7b:0e:18:f0:df:2e:99:74:93:79:c3:13:b7:62:8a:
f6:b3:ad:30:a6:0f:3e:d6:71:f6:ed:42:f0:85:e1:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.119.16.0/20
66.181.160.0/19
192.82.64.0/20
192.82.92.0/22
192.82.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ff:cc:fc:50:08:3b:34:8e:a6:b7:aa:8b:40:b9:b7:71:61:
f8:98:8a:e2:9a:69:23:5e:a6:79:16:9c:e2:0c:bd:ad:a5:88:
35:1e:f4:39:8d:ef:66:e6:cb:b9:f5:be:d0:d9:92:e8:ac:9b:
42:b6:2a:51:93:c0:70:bc:fa:12:4f:33:e7:73:c9:6f:19:5c:
45:88:63:3a:71:d4:f5:87:05:39:3e:dd:1a:ab:fe:47:5d:9d:
68:a4:d2:ad:ca:c7:68:17:32:2d:fb:a7:8a:1a:6d:3f:48:54:
5d:1a:45:c2:76:15:28:8c:68:ae:d9:42:4c:fe:d8:e5:18:a5:
a6:76:1e:7f:c4:5f:c4:5b:35:13:56:76:56:86:c7:60:2f:74:
3c:14:25:f5:08:2a:96:07:7a:77:f4:1f:b1:a2:41:b8:44:45:
9f:8d:43:1b:1e:6c:d5:03:6f:d3:20:b9:56:90:b8:d7:7e:4c:
9d:1e:66:cd:37:82:12:fd:2f:e2:07:90:13:0e:7d:3f:a0:50:
63:00:8d:6f:5f:7e:c4:9b:4d:96:65:c5:b9:80:c5:70:01:5b:
73:90:94:7a:95:ee:01:ba:6c:1d:94:e0:d3:e2:3d:23:5e:84:
63:b8:ee:17:ab:a9:94:88:b8:7a:27:4b:fd:bd:2b:78:51:27:
0b:98:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:43:56 2026 by rpki-client