Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer
File: xBA2pq0HEadA_q5RVOE3zud7x7E.cer (raw, json)
Hash identifier: xGrLK1enqwssC8BJrMSOZozVTiPYsg0D3+Agvjqbhn4=
Subject key identifier: C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7D3D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Jun 2026 05:23:17 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32061 (0x7d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 18 05:23:17 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91F7113, serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:1f:cd:fb:d0:16:e7:63:87:0b:8d:ae:4f:
9a:ba:a2:4a:17:93:a6:eb:c9:fb:80:51:6d:4f:f8:
50:4d:11:a3:3e:70:38:ba:1f:2d:ad:5e:b9:70:b8:
2f:94:25:71:3c:af:35:bb:fe:c9:c5:f1:e2:8e:67:
87:7f:2b:b8:64:ec:18:e7:a3:0e:5f:52:67:1f:72:
3a:10:41:61:0e:91:63:b0:0f:11:bc:6d:82:1f:5d:
29:1b:e7:c4:81:34:bf:18:bd:87:df:87:45:8d:c8:
33:87:7d:09:42:85:28:9b:c0:57:53:f2:3e:49:b1:
4d:91:a2:1d:3e:10:94:f2:44:ff:b2:2c:71:cc:fe:
cc:56:67:8c:d0:e6:e5:cb:86:b0:96:2a:a9:6b:2e:
70:cb:2d:8a:f5:f7:73:90:73:43:f5:70:b7:e2:fb:
ac:2c:72:55:52:13:a0:f8:71:dc:5a:9b:36:b7:65:
75:5e:ee:c8:d9:c2:30:be:b4:30:9a:d9:24:9f:3e:
69:d8:89:02:49:0d:5a:1a:53:46:b0:62:1a:77:b3:
f2:11:57:93:a6:34:ae:98:6f:63:a7:b1:09:25:dc:
2e:99:03:f0:0c:73:c6:8b:a0:35:0d:45:86:b1:52:
78:59:ec:69:6a:5d:c2:a3:9f:a6:af:7a:99:fa:da:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.6.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:7d:3c:13:e7:28:e4:f5:be:4b:34:7f:38:ed:30:74:35:66:
e3:08:e8:5c:89:09:56:8a:f0:46:90:24:3c:7f:ef:1b:5b:31:
93:25:de:51:55:28:7a:bf:a4:55:4e:37:3c:3a:b7:2d:33:9d:
71:41:71:1d:6d:e4:b4:22:a2:47:93:b4:ea:e1:ce:17:c5:9d:
c1:e0:48:b9:62:91:73:e4:d4:41:b8:68:64:59:95:51:f1:ef:
e7:b8:a7:7b:e1:46:13:b3:88:76:a5:95:ce:29:6b:89:a6:e9:
33:c4:c2:c8:27:fa:61:60:1b:c5:6c:13:aa:b5:9a:2f:09:36:
1a:5a:6e:a8:b2:a3:66:2a:6a:16:05:b0:00:ac:7c:73:26:bf:
fa:f9:b8:e0:32:ba:12:95:b0:42:8a:02:4e:1e:ab:de:29:71:
bc:24:fd:d3:1f:9d:44:bd:82:a5:8e:27:f6:46:fc:1b:f2:9c:
20:29:62:2b:81:32:91:83:6d:2e:99:96:81:f0:c7:d7:b2:e6:
69:fc:9b:c2:16:31:ca:0d:3c:a3:f3:54:6c:4a:a9:63:0f:68:
f4:de:da:69:df:ab:6e:01:e1:ac:d6:50:96:65:1e:5b:aa:2f:
f5:3c:70:76:bd:1f:97:86:7d:1f:eb:46:cb:9c:5e:41:f2:0b:
21:bb:7a:6c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNjE4MDUyMzE3WhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGNzExMzExMC8GA1UEBRMoQzQxMDM2QTZBRDA3MTFBNzQwRkVBRTUx
NTRFMTM3Q0VFNzdCQzdCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALmlH8370BbnY4cLja5PmrqiSheTpuvJ+4BRbU/4UE0Roz5wOLofLa1euXC4L5Ql
cTyvNbv+ycXx4o5nh38ruGTsGOejDl9SZx9yOhBBYQ6RY7APEbxtgh9dKRvnxIE0
vxi9h9+HRY3IM4d9CUKFKJvAV1PyPkmxTZGiHT4QlPJE/7Isccz+zFZnjNDm5cuG
sJYqqWsucMstivX3c5BzQ/Vwt+L7rCxyVVIToPhx3FqbNrdldV7uyNnCML60MJrZ
JJ8+adiJAkkNWhpTRrBiGnez8hFXk6Y0rphvY6exCSXcLpkD8AxzxougNQ1FhrFS
eFnsaWpdwqOfpq96mfraNBcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTEEDamrQcR
p0D+rlFU4TfO53vHsTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjcxMTMvQ0Q2N0YzMjY2QUQ1MTFGMUExNTU4RjlFNkM0N0E4ODgvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY3MTEzL0NENjdGMzI2NkFENTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBI
RWFkQV9xNVJWT0UzenVkN3g3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaDsBjANBgkqhkiG9w0BAQsFAAOCAQEAHX08E+co5PW+SzR/OO0w
dDVm4wjoXIkJVorwRpAkPH/vG1sxkyXeUVUoer+kVU43PDq3LTOdcUFxHW3ktCKi
R5O06uHOF8WdweBIuWKRc+TUQbhoZFmVUfHv57ine+FGE7OIdqWVzilriabpM8TC
yCf6YWAbxWwTqrWaLwk2GlpuqLKjZipqFgWwAKx8cya/+vm44DK6EpWwQooCTh6r
3ilxvCT90x+dRL2CpY4n9kb8G/KcICliK4EykYNtLpmWgfDH17LmafybwhYxyg08
o/NUbEqpYw9o9N7aad+rbgHhrNZQlmUeW6ov9Txwdr0fl4Z9H+tGy5xeQfILIbt6
bA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:33 2026 by rpki-client