Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
File: X60bOb5FVSYiBtGfWmabx7afcsg.cer (raw, json)
Hash identifier: 6OpeYJxXWx1vkjs5B6jK7yuGhTT/FMMl5jXfZo0R4CQ=
Subject key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E1C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jul 2026 13:32:34 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 192.150.129.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32284 (0x7e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 3 13:32:34 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:59:7f:fd:0a:a1:41:b5:be:76:33:9b:f3:
35:32:3b:4a:df:12:92:75:6d:44:36:05:b7:21:51:
fd:a6:da:bf:13:5c:ae:6c:35:5a:a5:54:e3:dc:83:
53:35:df:19:78:dd:c7:d8:fd:b0:9e:87:9c:7f:ea:
7c:b3:90:e9:25:77:94:07:23:99:07:b6:97:31:11:
43:4c:fa:f0:69:8e:e7:a5:a8:69:ad:2c:1b:ea:9f:
f1:63:37:0b:b7:ee:0c:a0:72:c2:be:49:be:f0:8d:
44:da:b3:a7:1f:a6:06:27:92:4d:1b:aa:bf:9a:39:
f8:83:6b:56:1b:34:98:fa:e9:01:a1:db:c8:88:f1:
f0:70:ff:6e:89:24:6a:e1:fa:68:da:4b:1d:ea:00:
5d:54:da:36:b0:b3:8f:46:69:ef:0b:40:7a:46:b9:
ea:fb:d4:fd:2d:37:51:99:d2:60:d3:4d:73:f9:99:
a3:9a:54:0a:59:0c:7d:d3:89:21:7f:91:69:73:79:
76:4b:2e:de:92:d2:42:d7:07:8e:89:49:fc:8a:16:
d0:8e:85:2b:2e:fa:2e:56:fb:ea:25:bf:6e:5c:ca:
f3:71:70:80:02:a8:bb:0b:d5:f2:b8:e8:3e:15:c3:
4b:48:ff:22:cc:ce:0e:b9:62:02:1a:49:9d:06:bf:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ba:46:e5:44:83:a3:9d:e8:5e:af:b0:34:54:a0:12:07:03:
7b:6c:71:de:b6:6a:20:2f:7c:0f:d9:8c:7d:bf:a1:86:1a:31:
2f:2a:62:93:ed:a6:0a:27:30:3b:45:05:93:6a:7d:dc:08:33:
5f:67:f2:72:86:ad:c2:67:50:a6:d0:33:78:e7:d2:55:8a:68:
ae:34:91:b1:63:dd:8d:4e:d6:f9:92:08:f9:24:b6:60:40:a7:
d4:f4:c8:19:d6:6e:06:36:20:aa:47:e1:bb:6b:65:98:96:ca:
f5:c4:9d:b4:75:48:dc:4c:f3:ac:9b:77:6e:61:b2:fa:e4:df:
c8:91:9f:ad:69:6e:73:ac:ed:0f:ae:2a:eb:98:32:fd:fc:a2:
91:08:9a:ac:8a:a4:ff:ff:66:45:4d:94:39:3e:82:ed:64:e4:
f8:5c:a4:db:3c:72:3b:b8:e0:03:eb:ec:c2:c8:fa:88:5b:8e:
22:d0:ca:62:d3:f8:d3:87:e2:55:1e:4d:6e:1b:aa:41:0b:5f:
4c:03:99:38:ae:62:ce:14:6f:ed:f5:47:c6:e0:5f:f1:be:86:
11:db:3d:9a:cc:2d:5b:40:1d:42:bf:bc:1e:4c:70:8d:fd:49:
be:0b:8b:8a:58:ac:1b:47:17:bf:90:a5:d7:8c:63:e6:a7:91:
38:3a:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:43:31 2026 by rpki-client