Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer
File: dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer (raw, json)
Hash identifier: Q/WC2ET7uYf0JFx25NCHwYlURBgZm2ldYXDcFBcFS70=
Subject key identifier: 76:68:3A:FC:4D:2D:B6:4D:3F:F1:FC:0B:FB:0F:88:52:06:CF:23:1C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78CB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Mar 2026 08:04:44 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 146.88.160.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30923 (0x78cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 21 08:04:44 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9198BAC, serialNumber=76683AFC4D2DB64D3FF1FC0BFB0F885206CF231C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:6b:03:87:98:97:5a:9d:18:b5:f2:7a:b4:
c8:5a:6e:52:ce:f2:47:db:c0:3a:75:9a:d6:44:8a:
df:d7:a9:56:4a:88:96:48:c4:e3:97:c4:74:e9:b3:
b5:33:d1:43:8d:97:46:06:c9:70:98:fd:e3:98:58:
4d:f7:19:de:35:50:06:91:fe:49:f4:01:1c:af:82:
83:9c:6f:50:ad:2a:cf:05:9e:9f:ea:da:72:59:ea:
55:c7:7b:a3:ec:0f:ec:16:b6:30:da:26:9c:32:23:
41:58:85:9a:63:38:ac:0f:e5:b6:ee:67:1c:e1:83:
0c:f6:24:e3:16:4d:18:89:a7:77:48:46:ba:7c:da:
4e:a1:d7:1c:15:a2:fd:b5:84:a7:b4:24:30:88:5c:
91:68:b2:cf:fb:ca:8a:49:f7:96:1f:f7:93:9b:58:
3e:c9:96:c7:36:97:41:8f:34:79:f4:c6:94:f4:10:
65:67:1f:36:95:42:14:fb:39:00:60:7f:40:7b:f4:
bd:06:6c:07:6c:40:60:c5:75:f4:53:18:9c:56:41:
49:a9:a8:be:e8:14:a9:bc:c8:a7:a6:09:0a:99:e5:
40:a6:7f:01:3f:99:5e:32:d3:15:ff:76:5f:89:d7:
82:7b:74:ba:24:77:37:96:c5:67:1d:d7:01:c0:cb:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:68:3A:FC:4D:2D:B6:4D:3F:F1:FC:0B:FB:0F:88:52:06:CF:23:1C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.160.0/20
Signature Algorithm: sha256WithRSAEncryption
19:f3:d7:c7:77:3f:78:22:27:f9:ce:8b:16:24:a2:f3:da:de:
5e:68:7e:7e:ee:72:f0:cb:2e:05:0c:12:d4:39:66:85:78:ec:
55:ae:93:c4:74:ce:46:7c:f3:aa:5b:54:46:a0:b0:a9:9f:43:
d0:ed:e8:6b:86:34:82:9f:0a:47:8f:0e:df:27:30:ba:51:a1:
68:8d:c2:19:a1:33:8d:3d:12:30:83:4f:60:7d:87:ca:71:c9:
0b:c7:ee:3c:50:d5:91:24:1d:c1:69:e7:cb:37:d5:88:41:34:
ea:d1:95:5f:19:08:c4:10:77:d1:65:4f:72:9e:b6:c9:76:c1:
a6:8b:d6:15:4d:7c:50:21:77:08:c2:7a:98:a7:5b:03:0b:d7:
97:91:67:3e:b9:46:ca:0e:9f:a8:69:f3:af:1a:be:b2:29:84:
c3:85:be:ce:72:50:1b:60:bb:ed:a4:b2:ab:0d:10:99:94:6f:
d2:12:c3:98:39:a6:11:92:63:88:65:af:64:72:a4:d2:22:e9:
51:7e:83:c2:b9:dc:8d:ca:2b:a6:d9:75:f6:fc:32:6a:04:eb:
a2:4b:92:07:cd:ea:da:5a:5d:fe:b6:bd:74:1b:4d:ff:3a:4c:
7b:1e:13:e4:b6:bf:a7:21:bd:ae:dd:ba:5e:ec:e9:c4:76:ee:
ee:b7:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:42 2026 by rpki-client