Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
File: Z38M1kpd4sGwKO0APFaHS0j6LiE.cer (raw, json)
Hash identifier: hpQdJ4ZeXfLWeNu+v1FHO6PvWFHIB0PSHwbeywVBu+s=
Subject key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Jun 2026 14:45:57 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.50.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 13:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32112 (0x7d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 22 14:45:57 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:77:45:91:02:0e:61:ee:ff:2b:c8:2a:7b:
3d:8e:1c:86:f6:0e:8a:4f:4d:89:bd:92:21:9b:73:
c3:53:8c:c2:ff:0b:32:ab:8c:b3:88:9c:b8:03:99:
b8:0e:dc:25:3c:a0:b2:64:3c:50:6c:b7:ad:3c:27:
c7:b0:9c:94:2c:59:c9:dc:da:36:9b:0d:c8:6d:18:
b5:54:06:73:d4:25:11:be:97:87:1e:40:2f:b3:be:
73:0e:ee:07:8b:71:34:50:41:8d:f1:f3:d0:e7:8b:
9b:6a:2b:a6:b7:d6:3c:24:6c:ac:8f:dc:df:05:10:
bf:e1:b1:0f:94:9a:b3:ed:40:e9:bb:81:be:c1:d9:
f1:63:7f:fa:91:3f:db:bd:8c:8f:c8:84:9a:c1:9b:
b4:5c:bb:d0:4e:9c:0f:96:fb:e9:fe:04:43:d7:62:
69:fa:ae:20:a8:61:69:63:e1:28:58:0b:fe:9d:d8:
79:37:42:f8:fb:25:c9:88:04:38:51:53:4f:9d:75:
e5:74:0b:f3:1f:a8:86:a8:25:18:d1:b1:6c:49:1d:
6a:ca:b0:82:ac:4e:7b:c3:99:18:17:a0:98:a0:35:
4d:58:2d:80:9d:80:af:de:5d:2c:90:75:4f:5b:2a:
b4:bd:3a:c8:18:58:97:c8:f9:c0:15:99:48:e9:2e:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.50.0/23
Signature Algorithm: sha256WithRSAEncryption
42:c8:58:af:75:16:3a:e9:8b:ff:00:92:bd:a5:57:0a:1f:fd:
87:f9:62:dd:35:08:d2:40:a7:78:72:54:79:56:f1:07:c5:d8:
52:a4:01:ac:f2:4d:20:17:4f:78:b8:42:17:a1:ff:d7:85:9b:
a7:eb:04:02:5a:28:98:57:95:50:ca:c9:38:64:0d:cc:a0:cf:
c9:3d:0c:38:34:df:be:30:9a:55:d2:77:52:a9:7b:36:7d:fb:
87:71:20:c6:fb:84:51:ad:42:10:e1:2b:13:58:31:eb:83:d6:
20:af:78:e2:14:b5:51:1b:90:02:b0:8f:a2:13:da:47:fc:16:
cd:1f:46:c6:a2:bb:f1:68:ef:32:cb:ea:2f:f5:ec:19:fd:4b:
d8:fc:06:b1:fd:92:b4:31:e8:9d:04:58:29:c8:bb:e2:8b:dd:
c3:fb:4d:b3:b9:73:07:84:50:6d:da:75:d1:b6:a6:8b:12:9d:
cd:0b:12:05:6f:7c:f0:c0:96:17:0e:ec:c5:b5:34:a7:8e:7c:
10:de:57:a2:a4:9d:8c:05:6e:25:fd:c3:50:29:83:9f:44:c7:
08:eb:27:52:2c:ce:07:59:63:e2:67:d1:42:90:a7:e1:11:a3:
fa:71:bc:7b:ea:59:6c:39:38:cc:fb:f8:d2:c1:07:67:b2:ac:
9e:e0:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:29:07 2026 by rpki-client