Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer (raw, json)
Hash identifier: 2zPRlUMGKrpyHhvNsRHCQAEPJmZS2vydVFFUg/HdomU=
Subject key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A7D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Apr 2026 05:34:53 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 167.179.26.0/24
IP: 205.209.31.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31357 (0x7a7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 29 05:34:53 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:a5:40:ca:60:69:9b:a7:c8:ae:4d:30:8d:
6f:32:0a:2d:0f:33:a6:e3:56:50:4c:58:29:58:9d:
e7:c4:5b:ee:d9:a6:22:29:cf:f4:09:44:b8:5e:5c:
bb:8f:a2:a5:90:a3:c4:a7:3b:1b:f8:74:2d:44:3e:
af:d4:4b:7c:f6:ff:b5:8c:ad:72:f2:fc:3b:ec:d2:
af:c5:5a:31:76:ab:c6:3d:e3:3e:46:13:91:80:f7:
be:2b:76:e3:95:ed:60:e3:78:6f:5e:c8:eb:a1:bf:
cd:9e:d8:b4:6c:74:f5:2a:e6:da:cb:dc:71:0e:29:
ce:b7:37:3e:d6:97:9e:85:2a:62:5c:06:1b:d5:09:
fe:7b:0f:ba:f1:49:e3:58:11:b7:10:37:7e:4c:71:
b4:16:b3:8f:0c:d2:bc:e9:a9:30:91:15:cd:71:a7:
8c:c8:4a:ec:47:74:27:5f:9a:46:c0:10:69:53:da:
00:01:ce:49:00:a6:2f:40:9b:de:e6:08:7f:6c:e1:
f7:a8:22:f4:d1:c8:43:7e:37:3d:ff:f6:d0:29:8c:
28:b7:91:bd:7b:99:49:dc:b5:45:73:0f:92:79:ff:
c4:23:29:11:93:2b:31:8b:06:e6:59:ea:86:9c:c0:
3d:bb:a1:67:dd:97:43:30:a4:ce:4c:fb:f5:1e:99:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.26.0/24
205.209.31.0/24
Signature Algorithm: sha256WithRSAEncryption
03:35:bd:1f:24:1a:e5:6f:6f:66:f6:27:56:fc:7d:ab:b0:4b:
91:f9:e6:ad:f1:37:ef:b9:01:88:f1:c3:ab:a1:c2:ed:22:b9:
2e:9c:1b:e8:2d:c0:82:b5:ea:76:74:83:91:53:c1:5c:0c:d3:
83:55:84:79:a0:21:87:f7:ad:65:e7:d7:fb:be:31:22:6c:2b:
9f:b8:c6:58:da:da:7c:7a:f1:3e:42:93:06:bb:43:5d:22:a3:
69:fc:a8:43:a4:64:0d:7d:74:51:91:bc:9d:7d:c8:09:7d:34:
3f:c9:5b:99:36:ee:93:82:cf:33:db:e3:d0:13:e6:df:20:9f:
27:d9:e0:d1:ed:ad:b1:a9:a5:7c:e5:76:e5:ee:65:59:82:db:
b2:31:8c:3b:32:38:a4:47:d6:7f:c4:5a:45:8f:b3:fb:c7:1b:
6c:83:e1:d9:c7:70:a3:50:42:07:20:e3:a4:85:74:f7:73:3b:
d0:62:68:db:c0:d4:d2:14:6d:32:d6:2f:88:84:30:64:fe:04:
22:0c:0e:e7:30:f6:27:6d:f9:3c:f1:1d:2e:0b:b9:28:2a:83:
f8:f9:66:d5:bd:62:10:6e:c1:e4:29:08:cf:00:69:59:39:bc:
29:a5:5c:b8:0f:90:b3:ca:22:44:1b:23:de:80:d5:85:14:cb:
ae:11:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:10 2026 by rpki-client