Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer
File: kbKJkWte97NoabO6gQwkWzZOQ8A.cer (raw, json)
Hash identifier: k347zrpYkRsBSq8Yg5Y/SMAlxCrE++yvk0Iqp2okvQM=
Subject key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 830C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 08:33:23 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.220.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33548 (0x830c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 1 08:33:23 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:93:92:23:fa:69:5a:7d:2c:13:9d:b4:9b:
55:2d:f6:54:52:f3:12:b3:33:58:57:cf:27:35:2b:
5e:b0:cc:38:9c:53:3a:64:81:b8:3f:32:dc:c9:48:
6f:ad:69:d4:cc:78:1c:5b:ab:b0:d2:f8:85:e0:b7:
30:92:22:9e:d9:2a:bc:21:44:88:2f:a8:5e:8c:f7:
83:eb:26:a7:8f:ce:88:51:84:36:48:07:75:ba:75:
40:9c:74:d7:26:f9:d9:56:75:a2:eb:9a:ed:54:96:
79:f5:f4:cc:82:b0:c8:bd:8c:e4:a1:a8:80:ef:17:
0f:7e:47:17:b3:5a:88:fb:cf:c9:6f:20:e1:03:5c:
7f:af:0e:f0:de:19:10:bb:f3:26:6d:fd:dc:2e:d2:
ae:f6:b4:4d:0b:e2:81:ae:a2:79:62:57:41:37:fe:
a8:24:81:08:0f:e2:16:32:78:bf:2b:d4:4f:c7:5b:
7b:71:ee:b4:90:32:43:81:ee:54:da:7e:b4:38:eb:
a0:9b:cc:4b:e4:2e:9c:50:dd:a7:9c:b7:9a:1c:7d:
46:5a:54:2f:cf:47:7e:3b:ec:f5:04:9c:4d:96:13:
56:0b:5c:3e:bc:70:20:16:cb:34:da:82:36:4b:03:
7d:26:96:a2:56:34:75:11:0e:f9:2e:17:9a:a8:21:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.220.0/23
Signature Algorithm: sha256WithRSAEncryption
12:35:e9:db:7e:6e:06:f7:7a:0b:a4:21:19:0a:92:ed:b4:c1:
b4:46:c8:b0:2e:84:7f:b9:04:4d:d8:8e:2d:72:31:9c:ae:2e:
62:98:da:49:91:2c:e1:c3:2f:58:45:04:90:64:f5:ab:9c:d4:
07:5c:29:4f:3a:96:af:33:18:ca:51:ce:0b:95:04:af:bb:ff:
4a:56:a2:ca:d8:87:ea:19:aa:84:a5:46:27:74:29:5f:e6:e0:
a8:7e:2b:f0:91:45:3f:4e:71:db:15:37:44:a0:d2:a1:63:b3:
d6:25:ea:19:14:a7:01:8d:5a:20:6e:f0:9f:e3:0e:d8:e1:da:
f9:e1:37:55:4e:b6:f2:43:cb:67:55:77:9b:39:b1:b0:46:4f:
2a:cf:a6:03:50:d9:4b:8a:80:10:fe:95:c6:2a:7f:24:02:de:
ea:5e:46:c4:83:86:56:ea:70:69:42:de:04:59:9f:e2:7b:b5:
ab:22:80:8b:9a:13:21:f4:ac:88:dc:36:a2:76:1f:16:75:68:
7a:c2:89:a8:42:1b:d7:a3:9c:9a:a0:06:65:ce:53:47:31:aa:
e4:c9:f9:87:03:d8:5e:77:d0:b4:ab:aa:e3:62:a5:dc:b4:76:
c3:8f:40:7d:b1:39:0d:89:76:24:ed:e5:33:a0:59:c3:0d:d2:
b0:a2:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:52 2026 by rpki-client