Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer (raw, json)
Hash identifier: 0CBt8gN3KbvVL9YiuPd5cvwhO9c+eLN+XqEoy6Sk/3Y=
Subject key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E86
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Jul 2026 06:13:53 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.228.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32390 (0x7e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 9 06:13:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:25:2d:7a:48:53:0f:f9:31:af:6a:54:77:
03:d6:43:48:27:bb:2d:e8:97:d6:1c:06:6b:03:07:
04:8f:bc:23:a1:5f:49:46:80:73:87:e4:01:c5:35:
e5:84:72:8f:4b:29:9c:8f:db:66:33:f0:df:9f:8b:
e8:69:ee:0f:ab:00:4c:92:b9:5b:60:f4:c4:4f:00:
ff:30:f1:e1:21:6d:8b:41:d2:cf:38:83:bf:67:9f:
73:79:86:5b:00:e1:20:5b:90:52:a6:41:ce:73:90:
ff:55:a6:be:64:b7:4d:10:e0:36:e6:ca:82:43:05:
31:aa:16:14:9a:1e:7f:1a:a8:c0:57:bb:64:7e:8b:
c9:42:7a:ce:0b:55:a9:49:e5:1f:e7:63:7d:8c:4f:
11:3e:49:9c:f5:aa:aa:19:e7:8b:54:a0:7a:b2:87:
ae:7d:f9:af:18:b0:fa:fe:43:24:07:3d:66:21:5b:
7a:51:d4:19:70:27:98:53:70:95:cb:69:76:b4:ed:
c3:c1:34:8f:5c:97:6a:e6:4f:ed:db:10:0a:86:cb:
28:a3:07:14:64:9d:2a:92:bc:a4:7f:52:1c:89:bd:
4e:ab:6a:78:d9:8f:6f:72:8e:94:c2:50:42:34:99:
b0:2f:d6:aa:6a:f4:aa:f7:07:cb:c6:b7:cf:63:23:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.228.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:71:3f:58:71:d7:4b:aa:66:b8:e4:a5:8c:7e:41:ff:bf:7c:
00:48:6d:4b:2e:e1:77:d5:65:91:e2:78:79:ac:e5:f4:f6:69:
a9:f0:78:60:08:f6:26:60:4e:10:fe:fa:5e:a1:f0:3d:b1:f6:
fe:2d:c6:9d:c0:8e:4d:34:0e:bf:92:26:5c:3c:5b:48:38:aa:
2e:41:f4:c6:2a:f8:6e:49:bd:3c:b8:55:cf:47:39:e3:d7:48:
a6:21:68:79:89:fb:cf:21:1c:c5:53:19:a5:aa:60:f7:0a:66:
cd:92:cb:12:35:f1:43:60:db:33:23:24:f0:fa:b1:68:64:f1:
62:22:55:bb:31:a1:93:21:8c:8c:aa:bc:4e:b3:64:f6:3a:ea:
77:a7:6c:a9:8e:4c:62:49:78:8c:94:df:da:ca:3d:0b:93:27:
b6:35:4f:60:36:15:a1:29:3b:96:6c:57:0d:e9:49:df:6b:7e:
fb:07:dc:a7:2d:32:dc:84:02:59:f7:ee:32:39:d8:b6:5d:bd:
3a:bb:3d:78:ca:60:89:2a:72:64:ab:53:58:60:f6:60:bd:3c:
12:11:cf:37:e6:f6:6a:58:6d:6f:f8:ad:6e:7f:8c:51:f4:ca:
91:a9:ec:9c:83:91:b5:dc:b8:ae:44:4a:d3:f8:10:d8:0c:b9:
c8:05:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:52 2026 by rpki-client