Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/soJ7F7cBD5OvHy1I48A3OFxkFxM.cer
File: soJ7F7cBD5OvHy1I48A3OFxkFxM.cer (raw, json)
Hash identifier: YB65l8CgmH+AhJ9UCofch24/eP0SdOyqaAZjKmtRBLI=
Subject key identifier: B2:82:7B:17:B7:01:0F:93:AF:1F:2D:48:E3:C0:37:38:5C:64:17:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82A2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Sep 2026 02:39:03 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33442 (0x82a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 24 02:39:03 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91927A0, serialNumber=B2827B17B7010F93AF1F2D48E3C037385C641713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:2f:e5:16:2d:ff:a2:3f:26:bc:4a:c8:76:
be:8d:42:bb:aa:23:7b:45:4c:61:62:df:ee:5b:c7:
c6:f3:93:e7:c8:62:e0:8a:23:f9:bd:d1:79:c8:c8:
73:c5:b0:d8:42:d2:24:43:76:51:4f:9c:41:4e:14:
16:12:b0:8c:77:73:f7:82:f7:19:5f:d7:46:b1:37:
cb:cc:48:83:61:c4:6d:3c:a4:7e:a6:6f:d6:a6:e9:
ed:b8:65:e3:11:c8:bd:a5:15:c1:c6:65:79:67:69:
08:89:aa:50:4f:28:3a:42:88:49:ce:70:79:55:17:
5e:1a:f3:7a:fc:56:36:0a:bd:ec:03:ed:1d:56:cb:
7e:01:2b:ff:f5:d7:0b:5d:7d:97:3a:f4:c4:f8:d0:
7c:7b:77:3c:8b:ea:bc:51:3e:ee:8e:b8:0c:d7:71:
53:29:91:f5:ef:a0:2c:85:85:49:41:9a:e9:f2:e4:
a5:1a:85:f9:ed:4c:92:f9:77:a7:60:2b:05:93:62:
c3:d6:4c:c3:1f:21:02:1a:0c:18:66:f4:e4:45:1d:
89:19:7d:bf:6f:da:b2:10:f0:0b:c2:4c:ba:43:0c:
a8:49:3a:65:1c:4f:31:6c:9e:f2:dd:d4:7b:41:47:
e6:61:fb:49:ce:c6:b2:61:dc:21:9a:37:c5:84:b9:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:7B:17:B7:01:0F:93:AF:1F:2D:48:E3:C0:37:38:5C:64:17:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.224.0/23
Signature Algorithm: sha256WithRSAEncryption
45:36:74:a3:c4:99:b3:4b:f9:43:a7:a1:4d:fc:48:9c:75:87:
51:9d:31:26:5a:56:81:c8:ef:af:fb:15:58:bf:ad:db:33:c1:
6b:c7:64:41:de:d5:96:05:8d:d7:c4:5a:1d:31:a6:db:ab:cd:
e5:ce:90:ae:8f:61:cf:37:78:20:43:20:fa:79:6f:38:ff:fa:
7a:38:6d:9b:63:f0:16:11:36:35:c4:3b:31:7e:c6:fe:e2:4d:
f3:16:3f:4a:3b:52:f3:25:f8:52:f9:9c:c2:a4:57:10:1d:eb:
11:d5:46:04:22:07:cd:3a:01:a3:18:13:0e:0a:ed:86:5e:89:
ec:c6:2b:6c:07:a6:86:5d:11:b3:b0:af:bc:14:b5:a7:62:60:
1f:8c:5c:14:75:56:94:67:84:4a:10:bc:fb:ba:a2:5f:3a:67:
fb:67:9d:26:67:0d:d5:ad:4b:0a:47:c2:da:0f:f5:81:d1:d8:
05:c2:84:4a:db:66:eb:b4:4a:43:0f:af:de:0f:34:be:d9:c7:
e1:d6:a4:49:61:50:4e:b6:68:2f:91:f9:eb:20:a7:ee:2d:70:
ec:eb:ea:7d:fa:a8:c3:0a:a2:39:e4:15:6b:f5:bd:d9:6e:cf:
15:9b:47:27:b2:6c:c8:cc:c6:45:aa:f2:bb:aa:7a:44:d4:45:
0c:7e:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:45:54 2026 by rpki-client