Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer
File: 5imE0s0CFCbG34LJV7TilIT_Q2I.cer (raw, json)
Hash identifier: qOGs/NZbfhGrTweWSGjP9XEqlf179+KgB1CK45wAMNo=
Subject key identifier: E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80DD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 02:28:07 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 192.152.144.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32989 (0x80dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 18 02:28:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9173526, serialNumber=E62984D2CD021426C6DF82C957B4E29484FF4362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:55:b9:39:8b:7b:9a:78:cd:40:02:22:4b:
fc:4f:f8:85:87:55:5b:2a:e2:73:52:41:23:71:31:
76:b4:ea:b1:a2:52:b0:96:e4:ff:9e:58:ed:11:ed:
ed:19:1c:4b:d1:eb:f0:66:1a:cb:92:ce:86:9b:60:
f8:c4:92:e9:a2:48:1a:52:ef:f4:50:f5:3c:43:fc:
ad:f8:f5:7e:b2:40:03:4a:24:93:c6:2e:dc:00:3d:
cc:cc:37:44:bc:2a:40:90:0e:b6:14:2e:6f:38:b0:
86:60:15:72:b3:f9:91:8f:f9:f2:e5:44:d1:1e:23:
de:8b:9e:d9:d8:80:f2:c8:73:b6:02:d0:1e:3b:c2:
62:38:06:a1:56:eb:6c:51:21:4d:ba:2d:c5:8f:63:
a1:e2:ca:e9:67:c9:65:a9:0c:bc:8b:66:cd:9d:1c:
ad:a9:db:cb:4c:62:48:c5:66:f6:20:24:4e:0a:de:
d4:89:f6:eb:33:af:5a:a7:c2:ba:7d:10:7e:e3:6a:
a5:44:0b:69:60:56:7b:90:68:0e:bb:36:77:b4:f7:
3b:39:47:b9:27:80:9b:63:52:60:d4:10:e5:86:d6:
21:6b:b6:97:08:da:04:a4:9d:85:7b:16:37:66:b8:
83:f9:d7:b3:80:46:8c:c9:9f:00:54:66:df:cf:2d:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.152.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:73:bb:bc:d4:08:4c:9d:02:34:ba:f0:85:a7:4d:ad:58:57:
d9:5f:2f:23:84:2a:f5:82:d0:c5:f3:2c:43:8a:57:eb:f2:bc:
de:37:f1:59:f5:9d:f0:40:e3:8f:49:57:09:af:3b:aa:e9:69:
3d:49:f3:50:28:89:38:4e:bc:15:0d:53:15:0f:d6:42:75:ac:
9f:ce:84:38:01:98:8e:34:05:7d:72:a5:81:79:23:4e:d5:63:
5b:dc:7d:fe:b4:1c:ed:99:42:50:35:9e:81:f8:d4:1d:55:92:
56:b4:1e:04:20:7d:7d:4c:14:94:cf:25:5e:40:ba:48:d5:f0:
3c:f7:38:c9:cb:52:d5:a3:62:11:b1:8f:90:6c:0b:82:2c:1f:
58:0f:47:c5:40:5f:3e:81:f3:6b:52:29:b4:5f:e5:e9:9e:06:
bb:dd:7b:81:bd:c1:f6:da:4d:27:22:ff:8d:f0:0b:c9:76:b6:
9d:66:2e:7a:a4:d7:92:52:77:ae:71:29:de:f3:b9:0f:a7:58:
7d:26:a7:45:d3:e8:49:d9:1a:22:21:48:3e:13:d0:43:30:bd:
24:bb:e5:f0:ee:04:d1:35:fc:c3:c8:a8:a8:5f:0b:64:68:5f:
fa:b7:97:2a:d9:8b:35:7b:53:3b:c1:2a:34:5e:4c:70:05:dc:
bf:4f:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:14:59 2026 by rpki-client