Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer
File: NakpRAWKu-k3TFV7sIThgTRARH8.cer (raw, json)
Hash identifier: vlQ0jwLX/a78BN7/K0Pf4Hlym1jxpJU6eD3UWE7SO0s=
Subject key identifier: 35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7BB9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 May 2026 09:08:52 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31673 (0x7bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 21 09:08:52 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91923E8, serialNumber=35A92944058ABBE9374C557BB084E1813440447F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:cb:2c:66:df:f6:af:3a:87:bc:e1:bd:3c:
ae:df:0b:69:9c:ba:59:7c:7c:fc:21:21:39:26:6e:
28:06:5f:f4:e8:b4:56:86:61:1a:00:be:38:6c:99:
c7:02:c5:73:8e:da:d2:bb:1a:1e:c2:8a:91:7e:23:
ae:b3:9c:7f:b6:b4:b7:67:f2:80:e3:3b:ab:e6:9e:
76:95:09:88:1b:73:e3:46:13:8f:f1:cb:e3:38:89:
f6:56:87:b9:0e:0d:8a:31:65:52:12:e1:08:b8:4d:
68:c1:50:79:21:bc:52:18:72:f3:3f:0b:ba:3b:a5:
c3:62:44:a9:ba:60:68:50:68:9e:38:13:85:87:92:
13:d5:ce:10:89:84:1d:27:dd:a1:22:4a:f7:be:7e:
82:79:ae:04:c1:f6:d3:ad:8a:ee:bd:87:ab:41:db:
cd:41:e8:bd:fd:a1:4e:a6:28:7d:27:8b:1d:87:44:
0c:f6:6a:cf:7e:e6:ee:d8:fe:8c:ba:d5:f8:08:d2:
c4:8c:a2:52:e7:75:a6:72:72:f6:e1:59:37:28:c9:
9c:a5:3e:e3:1c:eb:06:2e:39:b2:83:76:90:61:d7:
60:74:6c:f7:70:8a:25:19:78:43:6a:ed:dd:c0:c6:
d8:89:c0:79:c4:32:6b:b4:f6:c6:be:9b:d0:50:a2:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.6.0/23
Signature Algorithm: sha256WithRSAEncryption
47:f5:31:38:5b:34:64:44:fc:ae:a8:f5:d1:2a:6c:bf:0c:a4:
2f:30:47:eb:69:86:36:26:d3:6b:12:0a:6e:b5:f5:e6:a8:62:
f9:fa:ad:2b:02:33:3e:13:c1:70:a9:50:d1:3a:7a:1e:5b:7a:
96:b5:c8:6b:3e:69:6c:78:b7:16:63:6c:5a:5f:a4:3c:99:30:
70:5a:9b:1d:9a:88:78:c4:83:23:dc:b8:38:20:5f:fa:51:1b:
c0:0d:e9:da:9d:ed:15:2c:73:48:8d:dd:c6:52:bf:26:e8:6f:
1b:2d:ce:8a:81:9f:97:2e:0e:79:9d:ce:5d:80:37:ed:75:d9:
4e:7f:9b:d6:31:6d:d8:31:e2:f3:a4:4c:3f:13:dc:45:58:a0:
30:f1:c7:00:0a:37:df:a1:ec:11:07:8a:77:9e:32:50:ad:b3:
a8:bf:43:db:1a:40:9d:4c:d1:49:31:c8:c9:d4:bb:ba:f4:e8:
64:18:cd:2c:95:a1:b5:e2:8f:0d:ba:11:6b:e4:04:64:a1:54:
e6:30:5a:41:de:ac:8c:9e:1a:fe:0d:f1:98:6e:d2:fd:7f:ac:
ab:14:ff:cb:61:a5:69:0b:9a:09:3e:11:99:ed:e8:e7:5e:3b:
4b:0b:46:b4:8f:68:fe:b5:62:e6:82:15:8e:ea:e8:cb:b2:96:
e9:6b:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:26 2026 by rpki-client