Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
File: pObuKivUtt87NTuua8SJKm047yk.cer (raw, json)
Hash identifier: qQ4s3oveF614wgVDnZaV/0/zlqhMncDCHY9yJGIMjaI=
Subject key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 55AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 12:24:11 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 185.203.36.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21935 (0x55af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 1 12:24:11 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:db:9c:d4:ca:12:b5:0a:d3:72:e6:ad:34:
99:83:cb:40:16:3d:e0:b7:5b:f6:e0:90:08:08:38:
6b:cb:0d:4d:d1:b8:53:fd:46:d8:44:79:26:bc:76:
96:91:50:6f:88:b2:3b:82:27:90:7e:58:59:97:d7:
ab:47:ce:b9:c0:24:21:e8:85:ea:02:52:6d:9c:a2:
cd:8d:98:16:bb:6b:d6:7b:ab:40:d2:ef:2e:29:66:
55:66:23:61:1c:c9:2f:85:ba:52:fe:2a:80:e3:3a:
ce:eb:37:13:9c:d2:e3:f7:fb:48:20:92:1e:84:b7:
37:3a:b6:68:b7:80:5b:2f:0b:cf:38:dc:78:cc:04:
27:c9:00:b6:c2:1a:6f:94:39:04:5e:a4:3d:09:6c:
11:d8:e1:fa:e3:43:47:c7:e8:c8:2f:1f:44:9e:1e:
c7:d7:04:e2:7a:87:c7:56:5d:c4:23:d0:91:10:0d:
08:10:8e:0b:13:26:51:bd:d7:dd:55:90:e4:e6:54:
fd:bd:00:ce:78:d6:1c:06:c6:af:1c:9c:b5:59:f5:
d0:b8:52:5e:8f:42:6a:22:d3:78:85:8b:01:d4:5c:
ef:03:1c:7c:df:e6:ce:75:22:b8:07:ce:6d:7d:51:
fa:3d:5e:87:3e:91:61:05:71:b3:e2:9e:3c:fc:bc:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.203.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:81:d9:5b:11:2d:b1:01:1a:75:44:76:e9:f0:9c:91:9a:8d:
0a:b8:50:49:5b:43:ec:05:2b:f4:2d:85:47:ac:98:80:60:e3:
68:1d:be:29:16:1d:2a:b4:ef:0c:52:72:62:46:f2:8c:66:73:
9f:ef:16:af:92:9a:bf:2b:1e:1d:ae:93:f1:c3:61:59:0d:30:
58:86:9a:c7:4a:a4:85:dd:8d:91:d1:a3:d5:5b:ea:67:5a:6e:
ee:96:44:bb:14:da:c1:82:9c:a6:1a:7f:23:88:fd:e1:e0:9e:
70:46:87:f6:02:26:f4:c6:af:d9:8e:50:87:d3:f0:49:59:21:
fe:27:28:be:55:16:53:03:10:a0:2c:df:8a:b8:9b:b5:8f:0d:
c8:65:d2:66:08:63:cc:4d:e2:b6:37:d4:53:72:09:32:bf:55:
60:ce:bf:32:e5:48:03:6f:f2:70:f2:7e:a6:82:95:11:f8:f3:
22:9e:9c:be:91:5b:54:f1:8b:c4:63:4c:11:1a:2d:77:87:b2:
c0:de:df:dc:d9:e6:ee:ed:7c:9b:19:5f:65:75:89:ed:46:3b:
1a:b9:15:6f:7a:3f:a8:e4:e3:ae:d2:94:34:c5:c0:53:2e:2d:
7e:0c:34:a5:85:b0:be:4a:6d:b9:cd:71:21:82:54:f8:81:c0:
fb:55:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:36 2026 by rpki-client