Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
File: iFALo678aJSTbs3IGvHXp7JyaPE.cer (raw, json)
Hash identifier: fRZraPiD5rEAT4R+RPrCvqqWaVbQpvowOBsvqRstzaM=
Subject key identifier: 88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7ED1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Jul 2026 07:09:06 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.65.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32465 (0x7ed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 16 07:09:06 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9198560, serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:9e:3b:d8:8b:c8:1c:c2:41:ed:c4:96:ab:
f2:f7:bf:f2:c6:2e:85:be:36:8a:dc:eb:d0:e7:8a:
c6:fe:13:22:b1:61:07:8f:76:db:b9:b0:3d:5b:36:
04:41:34:51:0a:7b:bd:d9:01:b9:4b:00:02:bb:c0:
78:42:95:fa:80:b4:23:67:65:25:64:ce:8e:33:20:
85:a8:22:61:f1:cb:ae:7c:bb:da:60:2e:c2:2f:42:
ab:42:01:3e:51:76:4c:ef:93:ca:78:d0:55:e0:e6:
9d:01:f3:a2:51:cf:7f:d4:b2:eb:eb:98:fe:6c:fd:
ce:96:5b:0f:fb:f5:cc:ee:4f:39:17:e2:fb:51:a3:
a8:79:74:a9:e7:be:97:07:7b:f9:cb:23:a0:1b:43:
b9:3b:46:dc:11:20:c0:0c:6f:bd:a7:2b:23:fd:d9:
89:08:e0:79:17:49:ff:f1:40:e0:41:0d:48:83:ef:
f1:01:9b:70:d1:a0:ef:13:dd:66:14:c3:4c:4c:10:
67:5f:ad:1b:3f:64:4e:ad:cf:17:bb:65:ed:d6:7a:
43:0e:d8:2f:49:ed:74:1d:e6:71:78:9d:a6:61:93:
f1:5a:ef:7e:93:04:31:f9:c7:26:0a:0c:33:9c:a1:
34:2b:c0:e7:b6:2f:56:07:71:1e:52:23:a4:3c:ee:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:f1:54:c8:7c:01:6f:68:af:d2:39:78:32:60:2f:1e:38:48:
3a:f7:70:c6:26:80:e2:7b:4d:17:08:e8:a2:c5:ac:02:28:c6:
c0:92:93:23:e7:43:9a:e5:be:73:e2:ca:6d:dc:04:7c:48:cd:
f9:0c:d7:4d:1b:5e:13:ef:ea:f2:76:4a:c6:44:cb:80:ef:37:
04:b5:79:66:c1:3f:da:20:aa:0f:47:53:92:6a:e2:09:ad:92:
7e:30:01:79:23:0f:51:20:b1:29:09:9d:15:93:6f:6a:a3:81:
d3:7d:21:04:73:48:bb:d6:1a:eb:05:42:a1:be:3f:ce:95:74:
e8:f7:6d:90:53:3b:ce:f6:d7:e4:01:72:5a:a6:5c:b7:0e:ca:
02:50:93:1a:6c:c1:61:d5:91:94:8b:ba:39:90:b0:78:34:64:
a3:dd:a5:da:51:c7:52:ec:30:9e:8c:57:08:4c:93:80:14:34:
f2:1a:7f:78:7b:4d:c6:b8:df:69:0f:33:f6:36:8c:b6:8a:8d:
97:9a:03:99:01:c8:9a:3d:5c:1c:92:7f:c8:97:bf:af:27:26:
a2:09:8f:03:9d:93:10:d7:13:b1:ee:f2:76:b5:e3:0b:e4:ca:
05:53:ae:67:9b:54:1e:16:ec:6b:ee:ad:05:f4:05:00:21:a4:
c4:e9:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:36 2026 by rpki-client