Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
File: EItwxYRvnQdVxcbbmN0maEDgWmU.cer (raw, json)
Hash identifier: rlZ5NTtsBxaPQbAhCllgDkRrtDGxsW4HSdqgyirjXDI=
Subject key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C3C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jun 2026 04:10:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.58.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31804 (0x7c3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 2 04:10:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:a2:a4:79:1e:37:c2:bc:56:f8:99:71:8d:
37:93:5c:ec:a9:e6:b9:a8:06:2d:44:a8:b3:fe:54:
70:eb:57:eb:ef:f7:18:75:8c:42:e6:d6:a6:17:fd:
cf:6e:f0:7f:82:cc:9f:81:42:0c:c9:38:05:9b:d0:
23:17:c4:6f:fb:59:26:65:8c:cc:ac:d1:20:cf:24:
f2:5f:6a:4b:07:f7:1a:30:85:3f:1a:ef:47:7b:8f:
3b:09:49:76:eb:4c:93:5b:60:1f:2d:b2:2e:4c:cc:
af:dd:34:9c:e8:97:1a:18:76:7c:fb:32:b0:b8:70:
3f:46:48:d3:de:f5:a1:8a:00:21:9c:3b:5d:af:80:
af:f5:9a:26:c9:68:36:17:cc:e0:50:4b:d1:26:25:
5f:db:91:09:d7:e8:32:62:fd:1f:4d:4a:c5:e2:45:
21:96:6f:ad:65:34:57:a5:9a:4b:e0:0e:8a:e0:26:
b4:d8:0f:cd:44:a1:7d:63:f9:62:49:56:4f:e1:9b:
fd:cc:ba:56:9e:81:04:b3:51:11:05:bc:86:05:9f:
a5:73:74:3a:3f:c7:c1:b3:29:83:a3:ec:a4:e6:af:
20:55:02:4d:e4:fd:2c:f3:67:8a:5c:b8:99:37:10:
9e:41:0a:4c:53:bd:ab:13:84:c7:6b:e8:ad:b2:3a:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.58.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3b:ca:1c:06:68:af:21:95:f2:31:a3:92:fb:2f:c8:d7:c7:
9d:b3:ff:87:c7:11:ae:3b:dd:16:ef:7d:f7:1c:eb:38:0f:a7:
64:ba:4e:ad:96:d3:35:3a:e8:bc:08:65:ce:95:67:7a:e4:4f:
24:6b:43:e5:44:04:50:74:58:54:48:28:1d:21:02:8e:fd:76:
9f:8e:52:ec:ca:76:71:86:4d:4a:c8:87:ae:ed:58:c8:14:dd:
27:62:b5:33:75:9a:da:18:26:88:c0:3a:da:1c:3d:5d:34:4c:
22:be:dd:0f:62:8b:8b:ab:06:7e:d8:e0:b8:1b:39:c4:f8:ef:
c9:49:6b:6f:39:94:0c:23:25:95:a6:cf:f9:5a:fb:bf:f7:4a:
1c:c9:7d:a1:87:27:77:53:b0:c6:ba:25:9a:f9:68:80:4b:c2:
e1:82:5a:19:c2:c4:7d:29:02:9f:17:96:8e:7f:f5:6b:e7:47:
92:71:41:ab:c1:fb:39:57:e1:0f:c8:d4:b2:9b:2c:29:53:30:
19:9d:a7:04:23:82:d3:de:71:1a:0a:cc:e1:99:fc:26:f5:4a:
8e:72:30:ca:a8:cb:a7:d4:96:0c:b2:c3:17:34:2e:03:30:8f:
49:a8:d7:4d:1d:d6:8c:86:cd:ce:ae:78:a9:ca:05:ce:96:81:
7b:af:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:26 2026 by rpki-client