Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer
File: IY_bC_-9DsQ8Nb53hZviztXFQOo.cer (raw, json)
Hash identifier: 3uwhm6J3/W1pP0LKte121d7P6dQk0tt2zhi4/nO1pOI=
Subject key identifier: 21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7DA0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Jun 2026 06:08:09 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.38.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32160 (0x7da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 26 06:08:09 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91CF477, serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:ab:8d:b8:97:33:0d:a5:1b:8a:93:a6:2b:
b1:07:7d:30:a0:8b:40:f9:1e:19:14:64:e2:e6:5b:
b7:69:8d:bd:8e:f4:68:9e:e6:ac:74:6e:1f:9a:07:
60:68:bc:26:79:3c:d5:14:91:09:14:ae:f6:23:46:
5c:99:b7:a0:90:f6:dc:dc:a9:96:59:94:fb:0b:c6:
5f:21:19:c2:21:fc:08:19:95:35:44:bd:03:a5:81:
92:3c:bf:1b:c8:0b:3d:3e:62:c3:93:d4:a5:5f:57:
6a:98:6d:a7:ad:7a:7c:ee:de:b1:4a:09:2b:6b:4f:
ef:97:a7:f8:1c:42:ae:74:cf:a5:5b:7b:be:b5:6a:
12:2d:aa:4b:29:25:f2:12:56:cb:47:3a:37:64:16:
8a:2a:21:9e:b4:c2:1c:65:5a:e2:fc:c6:43:19:7b:
88:54:4e:87:1b:fa:7a:9a:77:01:8c:32:88:f5:e8:
20:01:28:5b:a8:00:c7:cd:4b:c7:f4:8b:bc:dd:4d:
3c:b9:dd:88:55:f7:b7:23:1f:0b:58:42:af:5e:10:
b8:a7:4b:e1:5c:c4:ac:73:10:32:92:5e:c0:3a:19:
82:b8:3d:3b:e3:a8:3a:1a:58:f5:f6:4e:4c:d9:7e:
97:30:e7:5d:e9:c0:c8:e5:20:b6:ec:43:4d:ff:40:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.38.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:6e:03:f9:f4:7e:4c:03:97:51:f5:85:61:1d:44:51:12:c6:
a1:1b:ee:41:04:68:09:70:4c:e1:ba:6f:4f:85:b8:93:bb:93:
e8:59:e5:60:b7:ca:2f:74:51:11:a2:b8:7c:fd:bc:17:71:34:
0c:60:23:91:77:a7:4e:95:80:b4:54:ba:e6:02:3c:44:bb:21:
87:75:e1:b6:69:62:9c:52:ff:d0:74:57:64:d9:4e:d7:6d:33:
5d:91:a7:f2:de:b4:d7:35:80:7a:bf:ed:1c:e7:88:b4:d8:20:
af:28:1a:b3:37:21:d9:9c:e8:e3:c3:c9:ec:3b:90:ba:85:36:
6b:4e:ff:f1:a2:4a:31:96:4e:2a:81:15:e1:b2:79:fa:73:0b:
ef:4c:ad:52:2d:9a:73:fc:69:69:be:9b:e2:49:e9:8f:00:f5:
32:7d:b4:94:76:fe:6b:10:fb:ec:a9:5a:e3:d9:f1:16:15:a9:
f6:89:81:7a:71:8d:68:03:02:21:8d:f6:a9:cf:27:dc:a6:8a:
76:01:36:3f:59:f3:a2:45:f5:33:50:83:63:a4:95:d3:ba:17:
e2:f3:a6:7a:22:58:93:0d:50:75:67:63:fc:4e:ca:c6:fb:9d:
dd:ce:d2:eb:33:a4:9c:28:19:e0:63:00:4b:71:70:47:dc:c7:
e0:9b:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:32 2026 by rpki-client