Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
File: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer (raw, json)
Hash identifier: emxqV82hYy7gPyaIocOJoIa3HXny0ij7bzRim7Mjadk=
Subject key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7AFD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 May 2026 08:52:48 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.88.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31485 (0x7afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 6 08:52:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:0c:d4:a6:a2:40:20:38:a9:86:64:e5:58:
b3:a2:8b:68:67:d8:94:1f:02:19:5c:27:36:83:6f:
59:72:98:b1:0a:88:e5:7d:dd:77:62:44:50:04:3c:
65:20:30:56:c2:27:84:d5:13:d8:ab:84:86:b6:0a:
05:e4:b5:3b:ae:a7:b2:55:e7:ef:46:e5:3f:1a:0b:
4e:d8:e9:ea:7c:5f:33:4e:c8:ab:95:68:23:1c:75:
90:21:8f:95:8f:cb:ba:cf:f6:1a:77:00:cb:e1:0f:
19:f6:6b:77:6a:a8:78:4a:5f:82:21:a1:7a:f1:e9:
ff:eb:a1:a0:89:bf:31:d1:8e:ac:ff:36:3b:e7:e0:
99:df:82:31:94:7d:b0:15:3f:cf:36:a7:1d:66:47:
f2:ff:b8:8d:07:d8:50:9a:70:57:03:36:b3:3a:aa:
e4:9f:b0:bf:9f:20:eb:1c:a1:37:aa:7d:c4:46:2a:
ac:d5:ba:0d:c3:11:00:2a:df:98:12:ec:e0:2e:b6:
ad:cf:3c:51:a3:d8:fc:5e:a4:47:ab:83:9c:19:7e:
75:61:5c:74:be:1f:34:d8:2f:81:b9:d9:65:7b:32:
ce:6f:65:d7:cf:24:02:3b:36:d5:a7:34:5e:09:e6:
fc:e7:33:e8:b7:f3:e2:0f:30:51:d3:10:5c:64:83:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:47:85:83:e0:4f:20:95:e2:7e:a5:1d:7c:48:78:b9:5e:2e:
05:db:a9:e5:17:0f:b5:f4:98:5b:fa:a0:37:97:17:e1:18:47:
ce:bd:aa:c1:2c:c2:71:23:fa:57:d9:7c:9b:b5:bf:a6:81:91:
47:9c:59:42:a8:60:85:c8:8b:e0:9a:39:ed:75:93:26:d5:9a:
e9:a8:86:ff:a9:5a:fd:9c:9d:c2:73:6c:19:7c:f9:0c:f2:46:
99:d4:27:3f:a6:44:71:b8:c5:0b:e4:6a:5a:ac:9f:1a:5b:7c:
0c:ff:62:15:2a:04:b8:3a:19:8d:6e:8a:1e:df:ca:43:0f:3e:
87:1c:0c:32:5d:60:89:f2:60:f5:00:15:7b:f8:8f:b9:76:d8:
4a:5e:9b:89:5a:0a:32:14:fc:24:b3:0d:84:46:c1:b1:e3:96:
ca:cf:80:8d:f2:b1:99:70:1f:c8:6c:0a:b0:56:f0:9f:ad:a0:
c5:ff:b1:56:4a:6e:f9:de:42:60:fa:5a:58:4e:e9:1d:39:3f:
f7:26:2f:c8:24:40:ea:54:36:b1:29:6a:c1:12:f1:ed:c2:db:
29:ea:0f:29:76:3b:7e:e8:35:fd:5a:36:68:42:78:0d:2f:2d:
bf:d9:fc:50:a0:fe:44:08:c0:7e:af:27:9b:24:bc:b8:14:48:
28:6c:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:36 2026 by rpki-client