Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer (raw, json)
Hash identifier: dgQAXqIS3tsW84UjQXQsgCNuuq9Sm1svLL4+XCCCVz8=
Subject key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 780E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 12:50:13 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.222.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30734 (0x780e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 2 12:50:13 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:e9:3e:ff:1f:66:c3:af:13:02:76:4e:f9:
89:08:20:5e:63:f1:59:cf:11:4f:dd:60:a7:de:e6:
3a:03:66:98:a4:4a:94:a0:a6:20:1b:f3:34:95:d5:
39:1d:3b:41:e5:aa:fa:a3:bb:e0:51:16:43:a9:bb:
2b:8f:cb:09:1f:2d:47:71:10:71:ca:4b:17:db:c5:
85:83:be:ac:36:92:8e:c5:59:76:de:bc:26:14:cc:
80:d9:15:ad:44:06:f5:d2:0d:f3:b4:da:27:17:e3:
e5:d3:50:7a:50:0c:09:89:b2:21:79:38:8a:21:c9:
8a:8f:ff:f3:07:5d:50:9e:24:ed:71:a5:a5:4c:8e:
f8:9e:ed:27:8e:57:e9:39:50:7f:ba:58:3a:43:e7:
13:62:1d:c8:ee:90:39:a0:b6:7a:b3:d2:12:49:ac:
f4:45:68:6b:cb:85:f1:a3:a1:55:c2:6f:2e:d2:14:
75:72:3b:8e:48:5f:33:94:a0:d3:91:1b:8d:7b:4c:
95:14:a0:d4:2d:30:4a:48:0d:7a:ec:34:19:78:8b:
81:fb:6b:59:ae:e2:1b:6e:3e:78:13:06:02:0b:6b:
cb:95:af:21:b8:89:09:fb:50:57:6d:be:40:43:98:
bd:02:07:f5:2b:c3:77:95:63:8f:3c:40:38:1f:ad:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.222.0/23
Signature Algorithm: sha256WithRSAEncryption
16:e3:08:76:3b:0c:06:31:80:ac:44:9f:e5:df:39:02:e9:61:
b8:ae:30:98:11:7b:fb:30:f0:cb:0e:9d:95:b1:6e:a7:51:46:
ca:4c:86:7c:4f:c5:37:c9:f4:44:17:12:68:1e:04:d8:0d:fe:
84:cd:7d:0d:b4:a1:86:63:32:a2:4c:41:1c:11:07:e6:e6:43:
ed:07:c2:d3:08:7a:96:59:4b:55:25:44:19:d3:f7:89:9b:33:
3e:03:1d:11:01:c6:e3:b4:f8:94:7f:80:0a:42:03:cc:b4:35:
4f:9b:0d:05:47:53:18:77:8b:c9:e5:86:3b:7d:e4:2c:8e:aa:
b2:b2:01:bc:ba:4a:46:d4:b3:d0:35:ca:9b:68:5b:41:dc:dc:
e8:2f:97:9f:d8:5c:29:97:82:ce:36:2b:93:f0:16:f1:23:b5:
00:5e:f8:8f:46:bd:ac:e5:27:e1:5e:39:10:21:7e:29:1c:53:
89:5c:6c:3a:19:c5:c0:a5:c3:78:16:07:38:40:1a:b4:c6:cc:
44:e9:cc:f6:59:75:34:35:13:5f:a5:c1:12:a0:fd:f6:31:01:
bb:be:2e:69:a9:f2:07:6d:45:77:62:0d:0d:db:95:b8:b1:99:
fe:e2:e7:d9:1d:1e:df:b6:45:70:b7:1e:87:09:b8:1a:bf:d6:
ec:98:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 07:07:58 2026 by rpki-client