
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
File: piPcBe58I3DKREMQhN5RMh83pwQ.cer (raw, json)
Hash identifier: nz/ujlKFmLi9mXQrVencQ+uNW3g1JBCgZIC/75XyVvw=
Subject key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B5B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 May 2026 06:14:14 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.40.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31579 (0x7b5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 13 06:14:14 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:eb:58:e7:46:b9:07:d7:90:73:a1:c0:cf:
91:26:e4:3c:09:08:cd:24:a9:6f:e2:4b:ed:4f:38:
4c:69:0a:54:90:0b:2e:e8:c8:1b:2e:b1:d6:fb:65:
6b:82:a2:65:90:6a:61:c5:38:96:86:59:26:c6:7d:
7c:01:ac:98:a6:b1:e9:b9:10:13:7a:6a:77:1f:77:
15:65:52:54:0a:44:3c:90:16:7c:ec:b5:29:4b:52:
ad:da:5b:80:7a:25:c2:7f:73:d6:bc:d2:0d:e6:09:
52:88:f0:f6:1f:74:26:a1:72:39:fc:1d:90:20:e9:
67:57:61:2f:c2:77:63:28:e0:cc:12:36:49:b3:95:
9d:c7:cf:29:d1:2f:c4:81:35:30:55:5b:63:61:42:
06:6a:71:49:86:88:6c:b3:e8:bf:96:33:27:61:75:
2e:c8:a4:46:f2:ef:3a:a1:8c:44:e0:cf:6c:7a:d7:
fd:32:cb:a2:c8:4f:2d:92:6a:a4:de:fc:9b:ab:13:
82:1d:1f:30:78:b7:50:2c:b9:88:a8:b8:f4:38:22:
90:5f:e0:37:55:42:25:46:d1:b8:88:2a:93:c0:1c:
4b:6f:7d:d4:c0:4f:ae:f5:1c:e9:45:19:a7:84:ce:
da:1b:6d:2d:3f:b4:a7:6b:71:17:47:18:75:f2:9a:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.40.0/23
Signature Algorithm: sha256WithRSAEncryption
65:2e:0d:d3:7e:5e:93:ab:f1:7a:b9:25:94:77:9c:dd:c7:9b:
16:5f:22:fd:2f:34:ab:e6:b9:99:e1:33:51:94:23:70:37:6d:
57:c4:9e:0c:e1:15:60:9a:7f:44:11:31:98:93:d7:45:03:1a:
65:96:c9:35:80:84:40:94:99:07:b3:48:62:3b:88:54:8e:f8:
18:e0:bf:c5:91:0e:04:66:79:35:7c:01:1d:cf:0e:cc:30:02:
db:06:90:34:52:dd:5e:3e:b2:67:a1:24:63:11:95:33:c3:93:
18:4a:7a:ea:81:43:18:1b:e7:cb:f0:6f:93:b9:ba:b8:e2:d5:
f0:97:f9:6d:b2:dd:ed:17:4f:f5:7b:b6:fb:f8:36:7b:5e:d8:
bd:3e:b6:82:1b:89:55:8b:06:f9:76:96:59:ee:d2:13:77:8b:
cb:98:c9:2e:9d:be:03:b0:9b:f7:ca:98:6f:83:2e:e0:b8:29:
04:fb:a4:fc:ba:f4:32:70:7a:cd:62:54:d7:3b:b6:4e:0b:02:
b2:02:97:06:c8:31:7e:fe:d5:1a:03:87:1d:d9:99:a2:1c:9e:
1d:f7:3b:62:67:9c:67:60:2b:b6:2a:91:50:b3:38:eb:91:8b:
6b:73:06:74:65:50:c0:0f:63:d6:1b:5e:35:75:e8:c6:7f:13:
15:7f:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:12:08 2026 by rpki-client