Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SblgMrI-nVUHGDDunb455W6F7Dc.cer
File: SblgMrI-nVUHGDDunb455W6F7Dc.cer (raw, json)
Hash identifier: mw/RWMjkNMa6XGlNrYF6bRLk58HgeVjbymQ4LhiJcKw=
Subject key identifier: 49:B9:60:32:B2:3E:9D:55:07:18:30:EE:9D:BE:39:E5:6E:85:EC:37
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A31
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/SblgMrI-nVUHGDDunb455W6F7Dc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Apr 2026 06:19:04 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.34.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31281 (0x7a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 24 06:19:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91191B7, serialNumber=49B96032B23E9D55071830EE9DBE39E56E85EC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:ab:b0:94:ed:5d:a2:24:ad:1d:ec:01:01:
18:40:3c:04:ac:1b:45:ad:b0:75:de:08:31:53:7a:
57:c9:2f:20:0d:96:ff:f2:b3:4d:17:8e:6e:a4:b4:
d8:3d:c7:76:ed:a3:c6:e3:d7:0e:69:59:11:97:f8:
78:ed:c1:fd:8d:90:05:30:a6:3c:e6:1b:58:65:86:
6e:82:20:4e:6a:e0:5b:7e:c8:90:38:ff:24:ee:6b:
a1:3f:db:14:34:68:60:51:72:7c:ff:6e:08:ba:76:
34:b8:ef:43:f0:89:ed:da:74:0b:fd:d4:c5:02:28:
b9:56:24:cd:47:a3:ac:50:2b:fb:e7:f0:09:09:7a:
24:ce:e9:a2:0e:b9:86:e4:81:e8:2d:b0:1e:03:48:
12:41:a6:63:3e:a0:09:df:3c:39:59:8b:80:94:cc:
1a:37:49:d2:0f:21:df:c2:12:0a:00:b0:20:71:b8:
3e:0d:20:b7:23:ff:31:f0:14:70:31:fd:f3:e7:f1:
ed:7f:0d:5a:81:2b:31:6c:54:91:50:e7:14:5b:cc:
db:8a:4f:ea:1a:94:62:7d:19:4e:42:76:29:f9:ea:
32:8d:84:20:36:56:f6:30:ea:3e:9f:e1:a2:74:87:
c7:61:55:c9:81:13:ee:84:ce:18:9f:ad:96:08:c7:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:60:32:B2:3E:9D:55:07:18:30:EE:9D:BE:39:E5:6E:85:EC:37
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/SblgMrI-nVUHGDDunb455W6F7Dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.34.0/23
Signature Algorithm: sha256WithRSAEncryption
02:73:b3:e0:24:99:8a:cd:93:d1:2b:71:29:01:6e:d9:40:44:
60:e1:b2:e9:39:ab:de:ce:af:a5:19:05:3f:37:cb:56:60:45:
7e:68:42:ec:da:79:b3:a3:58:2c:12:0c:ad:75:8a:04:75:cc:
b7:1a:f5:05:df:73:fa:39:12:98:6a:7c:f5:34:bc:35:d6:3a:
99:d2:97:8a:39:92:3e:8d:04:8c:7b:c6:f5:ae:24:a8:6b:d2:
04:00:22:de:b8:ac:63:55:32:3d:de:78:7a:bb:7d:93:14:3f:
ce:33:b8:6e:9e:88:d5:a0:68:c1:14:fc:fd:7d:34:e9:65:3b:
48:ae:a6:db:27:d7:0e:84:34:eb:97:a0:e9:78:b8:01:de:9f:
bd:2b:18:04:00:ce:90:ea:50:3e:b6:9d:0b:81:cf:62:6d:22:
08:d3:72:e3:e2:0a:00:ec:95:4d:f5:b5:99:2c:02:d8:11:49:
d4:e6:c6:a8:3b:27:20:60:29:b9:13:a2:46:a3:a9:94:16:b0:
65:6d:38:46:e1:2b:b0:db:c0:38:4e:05:eb:f1:b5:25:ae:53:
3d:83:0f:b0:92:d6:bf:39:bc:fe:cc:85:c0:7f:b4:67:a9:f7:
b2:03:bc:a5:53:b6:58:8c:ea:d3:dc:ef:16:e7:bb:63:fc:79:
9a:a8:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:18 2026 by rpki-client