Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DV6n0vTGCELX3cfCV2G_dtycq8.cer
File: 2DV6n0vTGCELX3cfCV2G_dtycq8.cer (raw, json)
Hash identifier: Ufx+crXDsJPYx650NqlsUQyBMRI/Vgmli0BeSRQe7bY=
Subject key identifier: D8:35:7A:9F:4B:D3:18:21:0B:5F:77:1F:09:5D:86:FD:DB:72:72:AF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80AA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Aug 2026 09:40:44 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.208.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32938 (0x80aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 13 09:40:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91285B0, serialNumber=D8357A9F4BD318210B5F771F095D86FDDB7272AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:cc:08:31:b1:79:81:d2:fc:2d:69:28:25:
a2:fb:e6:89:d9:06:85:af:a1:74:90:92:08:f7:33:
d2:54:33:65:e7:a3:d7:1d:60:e4:c1:42:ed:d2:c8:
fa:b6:ba:9c:9d:0d:b8:f3:b1:95:ed:b0:76:04:37:
db:54:fb:fc:0f:e5:2b:e3:ec:50:ca:69:d2:2e:77:
16:3f:b8:a6:c9:86:5b:d6:3e:20:2e:de:f1:10:66:
49:b5:3c:d8:24:48:7c:d8:e1:da:b1:3b:ab:c4:a9:
d9:04:1b:37:a3:a8:90:c3:56:92:51:62:ed:aa:82:
25:b9:2b:41:39:8b:a0:67:70:88:69:81:ec:09:dc:
c6:7f:df:0f:e3:18:d8:20:f4:9d:48:8c:9f:f7:57:
c3:98:32:a3:8e:0e:f9:d5:cd:76:56:fd:39:d2:6c:
bc:69:92:22:1c:10:9a:6c:25:b1:73:c3:28:a7:52:
fd:7e:c8:57:76:a4:77:ae:d7:3a:74:ce:bc:b9:9b:
71:0b:87:7b:d4:ae:df:7d:15:29:a9:d0:54:27:56:
ea:eb:bf:74:0d:8f:55:ea:18:58:ff:75:49:4c:26:
b7:7c:ef:12:bc:99:05:be:a7:14:b1:78:6c:58:15:
28:0a:8f:8e:04:94:31:eb:7c:31:a7:03:f6:1e:08:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:7A:9F:4B:D3:18:21:0B:5F:77:1F:09:5D:86:FD:DB:72:72:AF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:44:8c:ac:e0:a1:0a:e6:50:46:51:7c:06:3d:f5:19:13:1e:
da:8c:6f:f7:24:c5:b4:c3:a1:46:ff:75:8e:f2:b0:8f:e8:21:
44:df:e5:42:b7:91:3f:7e:ab:0b:c2:1e:86:ee:db:21:70:29:
ca:5d:8d:90:06:b6:33:20:2f:d5:4f:3c:48:b2:05:87:27:6c:
1b:e6:ae:53:af:da:50:07:26:3a:33:44:39:80:5a:57:34:f0:
70:c9:36:e6:df:2f:57:b5:fb:8c:d7:26:c2:f7:3c:71:ec:3e:
27:d1:f9:7a:0a:48:03:9c:1e:48:ff:7a:70:e0:c6:35:30:ef:
03:03:e4:2d:0d:0b:68:66:d8:67:54:fd:77:15:d8:34:51:ce:
c2:b2:08:f2:73:f1:df:a2:f9:1b:2d:d8:32:08:ff:f7:ef:48:
e4:dd:8f:c3:50:27:db:21:78:0f:b8:22:24:93:c6:84:16:10:
19:11:c9:a4:ce:a6:52:ef:51:da:49:66:58:a8:ba:bf:45:72:
50:16:bd:91:8c:54:d5:9a:1e:b1:03:e7:6a:1b:c1:95:ed:42:
9e:ff:6c:c7:39:06:fd:cb:34:d4:55:20:28:a0:2d:2a:07:83:
69:a0:2f:c5:3c:2e:c0:96:b8:19:7d:8a:3c:3e:0f:72:8b:bc:
32:ec:d8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:37:42 2026 by rpki-client