Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
File: 33H2KoYwGsbTrKQJgyzDqdmcmhE.cer (raw, json)
Hash identifier: k5nIuhF29F+s5bpZFFBQqjrvjHm1crGgrP0YsNfS6IM=
Subject key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 546D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 14:35:43 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.191.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 15:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21613 (0x546d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 22 14:35:43 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:9c:99:5d:5e:ef:8c:5a:14:ff:02:7e:ed:
64:b7:33:21:78:c9:aa:6e:22:fd:06:46:e7:cd:4a:
f1:d7:eb:7c:71:36:a8:54:5f:7d:e8:e4:12:db:61:
61:a2:a8:6a:df:6d:3a:da:56:39:24:8f:39:8d:19:
da:b1:bd:80:19:28:00:aa:69:20:50:4f:9d:d8:fa:
8b:f4:9e:a8:de:33:8f:68:20:cb:07:31:99:a1:62:
a6:5a:bc:01:95:46:52:50:f6:b7:36:8a:8c:70:f6:
98:d2:6f:82:4d:8d:4a:68:46:99:36:58:10:35:f1:
88:ee:8a:bd:51:8e:21:0c:24:fe:87:58:54:10:62:
0f:f8:d8:4b:7e:62:8a:56:2e:f2:30:e8:81:dc:39:
4a:55:61:c1:83:db:41:87:d8:18:89:16:24:74:2b:
50:f4:93:6d:1f:64:b1:0f:58:6a:c7:59:2d:a7:35:
68:96:b6:dc:bd:4f:1b:36:e8:98:3c:04:12:0b:e6:
dc:c6:dc:c5:94:bb:ef:4e:45:7f:4b:09:63:40:d2:
e9:26:85:19:84:33:5b:56:64:99:bb:ca:f0:7a:cf:
01:69:e7:ff:05:0b:c6:dd:af:82:9d:be:07:8a:bf:
30:7f:6e:85:1d:95:ae:c7:5e:20:95:14:98:6e:d1:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.191.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6d:83:bc:65:d9:50:f1:23:20:61:e0:18:52:ba:9b:cd:c3:
90:25:13:ce:2c:1f:b0:ec:de:3a:5d:85:a2:9f:2d:39:c0:08:
b8:c2:74:6d:95:ba:c0:3f:4a:af:7c:7b:c1:36:6b:f7:e1:ee:
89:87:5f:8f:cf:4a:5a:fb:4e:0e:e4:c7:4a:9c:68:ea:94:87:
03:6a:0f:b6:8c:83:b0:42:fb:ba:49:c3:d7:10:8a:7c:a9:20:
a1:98:1a:7e:c3:af:4c:dc:df:15:2c:f1:dd:19:f5:98:c6:d7:
d1:c4:85:7b:8b:e7:20:e5:73:20:62:2b:20:15:c9:34:81:4b:
60:b1:6c:40:2b:fd:f4:d6:ee:9c:b8:82:ca:aa:3a:16:77:6b:
48:46:1a:a4:41:70:39:bf:7b:eb:1d:ad:03:39:a5:12:ce:14:
16:37:c5:c6:11:0d:5b:f5:5d:50:fb:13:d7:9c:b3:ab:63:2a:
80:a6:f8:57:d2:9a:3c:03:a4:7e:6d:11:08:f5:ef:6a:ab:4c:
c7:2c:59:24:e5:a2:cb:49:44:aa:3f:68:39:8d:66:94:ff:48:
74:4b:fe:fb:56:a2:05:1b:46:53:b8:83:a2:83:46:33:8d:d8:
ab:16:a1:eb:a6:1f:b9:dd:b9:3e:75:de:fc:0d:b7:35:11:94:
08:e5:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:48 2026 by rpki-client