Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer
File: c-CQ73mbZ1mwPSJR3ES3rANTpr0.cer (raw, json)
Hash identifier: mMvqHM5LrHbuuM44vGsv7DDe7V/TVdzneHP1bMCVuU0=
Subject key identifier: 73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8119
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Aug 2026 08:16:02 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33049 (0x8119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 22 08:16:02 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9122796, serialNumber=73E090EF799B6759B03D2251DC44B7AC0353A6BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6a:ec:ab:d8:a0:83:c2:2f:d5:40:2a:1b:97:
3b:6f:38:35:d6:b6:cb:de:19:2c:98:0d:2e:90:8e:
bc:f5:15:18:e8:ce:91:29:c0:26:7f:cd:f7:81:c6:
11:ae:a3:c2:90:73:56:ea:62:73:c5:fd:b6:b3:96:
5a:bc:08:80:c8:ce:a3:18:bd:63:0a:0d:4a:88:be:
d7:95:75:50:00:32:23:e7:e2:4c:d4:08:da:35:0b:
0e:a7:d4:73:16:06:95:12:ab:31:c4:da:7a:94:e3:
40:2f:c3:75:89:37:4e:b4:86:50:6c:64:b8:c3:c8:
2f:72:23:14:1a:30:65:58:7d:6c:24:6a:7d:20:16:
02:f0:bd:9c:c3:29:a0:6b:25:31:76:a2:88:25:a8:
7f:35:40:6d:54:5e:ae:cf:c9:bd:b3:d0:90:7d:bb:
8d:23:30:9c:70:fc:fb:58:8d:ba:1d:f0:2a:58:dc:
f3:d1:65:8a:3a:71:01:55:64:e0:9a:82:5c:95:a3:
43:87:30:ea:1d:83:bc:06:da:f0:57:e8:ef:07:93:
b7:af:6e:b5:cc:55:c9:ff:5e:f2:de:63:5b:60:c2:
d0:d1:7e:1d:c6:52:cc:16:33:77:d7:0a:92:53:b1:
67:41:94:7b:0b:62:6f:1f:f8:f1:b7:d1:4c:4d:e2:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:90:EF:79:9B:67:59:B0:3D:22:51:DC:44:B7:AC:03:53:A6:BD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122796/B4C8D8269E0111F1A1C9CC584811F970/c-CQ73mbZ1mwPSJR3ES3rANTpr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:57:e2:18:24:d2:ae:fe:2e:fc:99:8b:e5:f5:e4:3c:a9:26:
23:8c:1c:ca:9b:1c:72:4c:5b:25:cc:c0:ed:b0:d3:a5:44:9b:
2f:23:95:f0:00:c8:9c:3b:a9:5a:cf:f8:38:48:88:f0:7d:56:
89:4d:8b:65:82:ed:d1:b6:23:93:cc:0a:7d:36:23:7c:ff:ca:
c3:b1:dc:47:f5:9e:96:c4:86:0e:67:ef:44:dd:2f:0d:a9:1c:
40:80:d1:44:c6:20:41:1e:ff:75:a5:26:bf:95:2a:c3:bf:77:
71:cf:8b:bb:fe:4f:b6:01:4e:1b:fb:41:e8:c6:e2:e0:20:f8:
da:6d:47:79:7e:bf:b4:79:6c:bb:b8:90:b7:93:92:a1:33:5c:
2c:65:51:a8:60:f2:fe:bc:77:a4:2f:97:22:5d:1d:99:5f:e9:
34:4b:ab:bc:ab:72:77:48:6a:71:6b:a2:e2:98:3e:58:a4:27:
80:ce:21:c7:18:b2:52:a9:ad:d8:2d:2e:15:67:b3:a3:64:a4:
80:3f:6c:69:0a:c5:01:2c:92:a0:18:f1:b3:13:c3:29:22:9d:
cf:04:ef:24:5c:2e:08:46:1e:1d:25:90:19:df:98:02:b5:1e:
a7:48:a0:32:51:dd:14:aa:74:ae:60:d3:71:56:f5:2a:60:1a:
b9:55:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:14:56 2026 by rpki-client