Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer
File: xfPmCWA9MLk6tGt4klx63Q8s8hI.cer (raw, json)
Hash identifier: oFjghtf8SikMrnVIJTF1RvJhaUd30+35kG8iSNcb23o=
Subject key identifier: C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E6C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jul 2026 06:38:02 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.103.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32364 (0x7e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 8 06:38:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A917A689, serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:9e:f7:ac:2c:28:95:3a:ec:b6:85:b5:83:
ef:c2:57:c1:6b:68:07:6d:b4:38:6a:99:74:43:42:
33:1b:d5:56:f9:ed:c6:d3:41:a2:5d:d3:d7:b3:14:
25:82:bc:fa:2d:05:3d:a1:be:23:c6:61:a9:fc:92:
41:24:48:ff:95:7b:62:3f:08:4f:43:3a:65:2c:ab:
64:6a:5e:c0:93:4f:d2:31:df:4e:d9:53:78:55:fc:
64:b3:15:68:ab:6c:0b:ca:7b:7b:de:f2:a7:05:0f:
df:b2:0a:90:32:d6:ef:12:2f:d3:fd:0b:77:6a:02:
e6:71:f1:81:0a:44:49:01:9e:e8:64:36:7f:65:ed:
42:4b:11:d9:5b:21:3d:8f:c0:a2:8d:23:81:5f:3e:
18:37:f1:bb:fc:88:b8:f5:9e:11:32:0e:96:d2:7c:
c2:17:09:e3:b2:ea:77:4c:af:a8:51:c6:2b:2b:50:
0d:87:36:c0:79:4a:b1:29:f1:98:eb:3b:84:4d:ec:
6e:6c:03:43:a0:a1:2e:36:94:d4:b4:6e:35:97:da:
6e:c0:b2:d6:d0:32:97:25:05:b1:a6:3b:c3:05:79:
b3:cc:69:ef:f6:88:be:71:48:51:e6:1a:3f:04:cd:
ee:ae:9f:a2:ab:50:ed:a2:4a:0c:50:89:4e:70:3e:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.103.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cc:9c:df:34:84:3a:2a:9e:4d:e7:54:20:d9:f7:a5:29:4e:
3d:50:18:c0:af:c3:29:8c:ac:b0:3d:69:45:a4:85:85:ee:73:
8d:ad:78:65:c8:ba:3b:f7:6f:f5:67:21:a8:20:ae:2e:21:ec:
1a:ad:9c:a6:09:f5:85:13:90:ac:dd:d2:e9:16:ba:ab:bf:01:
c7:7b:d0:29:0c:24:08:8c:60:0a:8e:ee:d2:bf:e2:a5:6b:3a:
70:2e:f0:0b:e7:0f:92:20:13:0c:b7:cf:0d:cc:90:de:33:82:
da:87:64:8e:13:bd:5d:2b:74:bd:af:19:9c:d0:a2:d8:39:1f:
f8:15:ac:70:60:22:cc:1c:ac:5a:95:0e:66:79:e9:0f:ec:42:
1c:21:78:84:7a:ae:a7:10:9b:8a:7c:d3:13:fb:16:ac:40:4c:
e4:20:df:1c:2e:c1:ce:26:0c:38:31:cd:e4:33:f0:b0:06:cc:
d6:26:36:01:ed:0a:1e:6a:5f:ba:f6:1e:74:0c:08:d9:15:0e:
c0:e0:fb:b7:8c:87:15:2d:9b:2b:40:d9:6b:91:2e:b5:c7:15:
d5:68:55:e1:c8:e6:5f:fd:1c:5b:cf:e2:44:5b:e8:62:99:09:
6c:57:ff:8d:0a:b5:8a:6d:32:57:e4:a6:73:52:d0:82:05:44:
38:09:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:34 2026 by rpki-client