Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
File: zDdqaPyj4J8M61wsuRs02xTD68k.cer (raw, json)
Hash identifier: qtmKefZmUVKjssM1BVFTxHpa2NxXdQxJi/1wqd8HRWk=
Subject key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 801B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 09:24:10 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.222.192.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32795 (0x801b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 3 09:24:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:32:bb:72:99:42:6a:56:cd:af:96:26:5b:
df:5c:6e:28:c2:b2:d2:a9:66:cc:81:3d:ef:e9:18:
47:5c:6f:7e:13:3b:42:d8:d4:d1:50:96:88:23:69:
aa:dc:c5:79:4c:47:ff:c8:cc:74:57:67:f6:6f:e9:
ca:b0:86:64:90:68:25:92:4d:41:f7:ff:ed:eb:5e:
b7:4f:c1:bd:53:7c:04:1c:03:0d:a0:f3:11:15:b5:
de:ff:64:6d:8a:f6:7a:86:6a:f8:7d:57:1c:47:12:
3b:77:dd:e9:db:16:f5:91:27:97:92:36:3e:31:f0:
b8:d2:d7:1d:e3:a4:12:b1:bc:7f:8f:8d:03:48:43:
68:64:55:9b:e1:e2:30:3a:a6:36:ad:e9:30:67:a3:
e2:7c:8c:f9:0c:b4:c4:58:25:26:e0:5a:a3:e9:c2:
78:81:45:3c:ad:27:8d:be:94:01:18:e7:4a:e2:f2:
13:c6:1e:49:91:59:1f:c9:2d:f0:ce:34:76:9b:3e:
fe:a5:77:65:2a:ea:96:f2:36:60:c9:4e:db:78:76:
f8:7b:15:48:b2:b4:2a:47:28:a4:24:67:2e:d2:1b:
ea:eb:32:c2:cc:1c:a2:8c:5e:53:d6:51:2c:09:df:
e0:65:87:22:4a:60:6f:94:6c:70:62:52:cc:20:4f:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.222.192.0/23
Signature Algorithm: sha256WithRSAEncryption
69:6d:ff:13:d3:e4:f1:22:36:16:8a:c2:49:c8:df:79:a8:e6:
99:b8:d6:ec:ee:24:78:fb:38:6e:c1:f7:e8:82:89:ef:1e:ea:
5d:c5:9a:8e:fd:d0:64:86:29:57:33:2d:af:94:f9:ad:9a:16:
03:1b:cf:74:fb:6f:a5:ae:00:7a:b1:e1:11:1a:bf:91:04:7f:
9d:3c:ca:b0:f6:d2:51:ec:be:6a:00:59:8c:78:ed:79:ae:e4:
4b:01:f3:85:77:a0:d2:90:e7:ea:ac:1f:57:47:a3:39:1f:50:
c5:47:ea:5d:fe:6d:27:e8:29:d4:c8:03:b9:9a:d3:a6:b8:ed:
7e:c9:2f:9d:ad:2a:4c:25:b8:80:c0:40:49:00:5b:fc:4e:7c:
11:89:18:f1:6d:09:8f:11:f0:28:a3:27:f1:23:7c:fb:7f:47:
2c:ba:cf:cc:de:79:c2:3d:64:f6:58:e7:96:90:ea:51:ff:ec:
76:28:85:a5:06:8c:31:e2:a4:ea:7e:75:da:6f:1a:a0:83:86:
e9:1e:93:32:39:2c:40:33:14:c6:b5:45:b9:94:a2:9b:f1:37:
d3:e3:9d:79:2f:73:3f:bd:31:80:59:19:3f:07:48:d9:74:51:
46:b4:ab:49:f3:d5:67:e7:a1:24:76:10:07:17:1f:e9:5d:61:
02:f3:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:39:24 2026 by rpki-client