Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer (raw, json)
Hash identifier: vbzF/YAszCpydHuAh2tnD1ZhT89hZpG560dGUnGlliQ=
Subject key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7DEA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jul 2026 08:25:55 +0000
Certificate not after: Fri 30 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.90.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32234 (0x7dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 1 08:25:55 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:9b:9d:39:9f:6d:ae:44:42:5d:b5:10:5a:
27:79:91:de:6a:fb:89:cd:57:16:02:a1:e9:29:9a:
57:41:e3:62:83:cf:c6:b3:1d:c3:9e:4d:1f:72:9c:
eb:9d:3f:2a:dd:33:11:f9:0d:4b:ee:e2:c8:aa:b9:
d8:d2:5a:56:f8:f1:0d:e1:8c:5d:21:79:c4:b2:35:
ca:70:24:0d:7a:ec:29:1e:4f:1b:48:b9:39:3c:a5:
c6:3b:09:86:21:74:9b:de:e3:51:1e:30:c7:82:21:
d7:fc:e5:3f:41:db:33:f4:c6:8e:27:03:7b:59:5e:
86:f8:d1:fe:fa:3b:3f:35:93:7a:f8:d9:ec:9f:29:
4f:ad:b1:dc:96:cc:0e:16:b7:af:85:4f:75:27:bf:
4a:dc:63:de:ba:0b:5c:79:87:8d:3b:d5:35:a0:c6:
8f:e4:8f:5e:3f:42:12:5f:97:73:e2:5e:a8:8e:07:
b0:00:3b:f0:76:77:6d:94:15:3f:fe:d5:f6:da:a1:
e0:7c:02:96:f1:79:19:96:a3:f9:b7:bb:d2:a1:89:
42:ce:ad:90:db:f5:2f:34:3a:93:a4:19:cc:f7:4f:
63:8b:17:9f:d7:77:a9:ed:9b:cd:4b:16:8c:72:57:
4d:16:3d:fb:51:ee:17:ed:77:a0:e4:d5:e3:40:48:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.90.0/23
Signature Algorithm: sha256WithRSAEncryption
99:7e:37:6b:93:d0:10:44:dc:10:71:74:98:88:8c:a4:c9:fd:
d2:91:4b:48:af:c5:55:a0:0d:53:7e:d1:10:24:6c:22:42:8f:
5e:96:e6:8e:51:d0:83:48:df:53:25:64:b0:4a:76:cc:d1:5b:
19:7a:e8:22:ef:6a:7c:77:51:e5:44:98:62:db:d9:45:1a:37:
35:88:b7:54:e5:fd:61:88:db:f9:63:ae:75:47:c3:4c:1c:41:
b3:71:bc:f4:63:b3:7b:a4:4d:94:54:8f:a5:5b:3e:61:92:01:
40:74:7f:8a:32:89:9f:4b:89:7c:73:fc:80:4f:f2:f9:c4:5d:
34:0f:0a:78:79:5d:39:45:f0:66:7f:4b:dc:6d:51:d1:24:4b:
3d:25:ea:35:c9:ab:da:95:67:83:b3:11:0f:50:08:e9:0f:6e:
0e:61:87:ba:3b:fe:58:01:61:49:0d:54:14:d9:6a:bf:ea:76:
e2:55:e7:1c:67:d5:49:1b:54:1c:e9:8c:34:ec:41:cc:1f:4c:
dc:fa:fc:a6:42:61:ac:82:8f:00:b1:05:0f:f6:6e:80:28:d9:
a3:a1:ee:5c:13:4b:cc:f4:86:7f:5c:22:77:84:0a:86:bc:6a:
94:c0:25:6b:f5:f1:ba:e5:30:5c:b7:25:13:a0:47:6b:d8:2c:
51:1f:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:09 2026 by rpki-client