
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer (raw, json)
Hash identifier: r9uqvnDPHZqPL4YzMk2u837F3xTdkqN4KA0Hy8bfwNI=
Subject key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7EAB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Jul 2026 04:45:09 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.52.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32427 (0x7eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 13 04:45:09 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:d7:03:d4:37:03:c7:f8:a1:83:55:44:bb:
3d:5b:a1:5f:93:5d:c3:62:44:c5:0f:5e:88:19:7a:
ca:28:54:22:3b:db:1a:4f:86:17:2e:c8:df:a7:ab:
9d:3b:ce:87:cf:31:ea:37:10:2f:4d:ab:68:af:ab:
e4:d3:db:e8:77:34:a6:c6:70:e1:e2:a5:cb:90:95:
af:ec:93:a0:0f:ad:b9:8f:a6:25:c4:6e:d6:54:6d:
11:d6:fa:fe:8b:65:db:1a:98:e6:62:cd:12:bd:9f:
80:75:19:10:13:f2:af:c8:65:1f:47:bf:ba:0c:a6:
c3:89:e2:c3:77:97:9a:83:77:d7:d3:3c:9e:22:b8:
40:25:27:0c:51:f1:aa:88:3b:3d:63:7c:e5:b8:93:
31:d4:27:44:17:9e:7a:29:09:cf:83:2a:90:e3:42:
20:23:7c:1d:c5:d7:c8:fe:59:f2:d7:28:43:0c:18:
3e:65:49:21:f1:cb:63:a7:d3:69:0b:77:5c:f9:7c:
47:12:4d:1d:06:ac:66:cb:18:0d:81:dc:73:bf:9e:
e9:51:d1:b9:cb:e4:32:1a:9b:c0:78:12:8e:14:1c:
91:4c:f1:01:22:59:00:ff:df:39:0d:2e:09:ae:c4:
74:0e:a0:a3:ad:90:eb:ac:00:54:c6:ba:98:e0:97:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:c7:b5:d0:a2:9e:d9:2c:f8:65:68:74:d0:1c:d0:52:5c:70:
66:e4:b2:c0:b1:f3:48:42:d0:51:01:5d:35:ce:d3:20:0a:98:
a0:d6:bd:6a:af:6b:c8:9a:0a:d2:3d:01:e3:48:69:71:72:57:
09:dd:67:4e:cd:2b:f2:b3:b7:11:2d:85:13:ad:72:be:a8:1a:
e7:70:55:b6:6a:bf:5e:37:1c:bc:9a:14:bf:a5:d8:a4:b6:0d:
45:9c:52:d1:d4:e9:cc:c2:3b:a7:e0:4f:ab:15:f2:60:1a:e0:
32:14:fe:1d:03:2d:92:27:5b:42:d4:68:e4:16:2f:ad:4e:b6:
f1:fc:45:30:21:d1:25:c1:48:a5:c5:52:50:39:34:86:99:62:
b6:0d:87:2c:ef:9d:1e:8a:12:76:c7:5d:1b:4f:be:4d:ff:a8:
80:56:b7:a0:2b:dd:3b:3a:cb:21:e9:6c:8a:44:f6:5c:1c:49:
7c:77:53:f7:a2:78:45:4c:b3:fa:26:ec:cb:b6:85:26:f7:e5:
4d:cf:c0:1d:34:0b:9a:a1:78:6f:4c:4a:7d:00:b2:f5:4f:7f:
a1:0a:af:b4:f6:b1:ca:6a:bc:3f:64:78:68:ad:e1:8d:92:46:
c9:9b:5c:c4:57:eb:6e:50:a4:a0:dd:a4:d7:e7:7a:69:61:a6:
7a:27:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:06 2026 by rpki-client