Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer
File: l85Wj2RoJWRz-Es4s84D6jVJ64k.cer (raw, json)
Hash identifier: gxXAK5DymmhPKyOs4CSYlhAzKzyOjhI4NuWZeHv2lek=
Subject key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 804A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 15:22:33 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 168.132.0.0/16
IP: 192.91.213.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32842 (0x804a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 5 15:22:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:cf:da:24:e1:3b:9f:8f:dc:8b:84:44:fa:
a4:9f:06:b5:b2:43:aa:38:33:71:e9:2e:08:5f:42:
8d:42:61:aa:ca:20:04:4b:f6:81:75:1d:e6:f8:4f:
eb:c2:19:de:fc:fd:d5:67:2b:2e:e8:d7:8c:26:b3:
4a:81:ce:e8:a6:56:00:ec:68:67:ae:f2:ce:4a:9f:
a7:c6:fc:54:e7:13:39:b1:24:20:6a:21:af:31:a8:
ad:60:25:5a:c2:41:ae:bf:08:7e:41:8d:99:39:4a:
88:a8:83:5d:be:57:b4:a2:eb:b2:6e:f8:ef:8e:50:
a0:32:f9:ac:04:83:77:34:01:c3:67:a9:47:a0:e9:
08:a3:31:2e:c6:cf:20:a0:71:fe:6e:6a:99:5a:96:
67:1f:6a:2a:bf:92:85:2c:3b:48:21:fd:bf:b7:c9:
4c:5f:d6:d5:19:88:d2:37:1c:2d:a9:5f:bb:b9:40:
d8:5e:e6:26:08:09:9b:e7:63:45:0b:cf:d0:83:41:
fb:3e:35:e3:93:16:d6:6c:44:c6:6c:1f:74:29:58:
cc:94:ec:e7:bb:d1:9a:40:ed:a8:d3:80:3b:ad:a3:
bd:97:d7:ce:58:5d:00:93:2d:bd:77:42:5b:c3:57:
92:7d:68:86:17:67:0e:d1:24:28:e1:34:95:cf:08:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.132.0.0/16
192.91.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:54:b5:4e:52:52:41:76:51:47:2c:99:7b:4c:64:16:47:f1:
14:55:04:da:2a:0b:e0:23:5d:69:7e:72:dd:f6:80:7d:46:3a:
64:ff:23:31:c8:a6:65:01:39:6c:c6:37:49:7e:e5:69:06:71:
3d:10:bc:33:5d:2a:1b:23:c2:ad:6f:3e:14:73:b1:a4:20:cd:
21:9a:e9:b0:43:57:b2:75:f4:bf:d4:52:db:a7:94:18:11:7e:
1e:81:07:c9:b7:5e:1f:ee:44:82:25:f7:07:55:88:fc:aa:cc:
c2:d7:c3:2b:03:26:92:aa:31:a5:20:9f:0e:b0:e3:1a:3a:a6:
4c:f9:a4:80:f0:57:87:da:f7:3d:a9:b1:88:4e:65:f3:d3:8f:
1c:59:11:08:38:87:86:8a:58:07:9f:e0:71:1b:44:25:de:bb:
89:5b:cb:d3:19:0a:e5:be:8c:cb:91:d6:d5:00:b3:21:18:a3:
ec:69:65:db:d4:a6:67:0d:d6:fc:dd:96:5b:02:df:ad:ee:e5:
ca:bd:7e:fc:af:2c:ca:51:26:84:34:4b:0f:6f:43:45:b2:2a:
8d:68:7b:66:e7:f6:22:2f:18:46:3b:ae:00:6a:aa:7a:a5:93:
fa:f1:8f:35:4d:3e:36:01:22:fe:46:43:fa:49:87:99:81:e0:
14:85:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:50:07 2026 by rpki-client