Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.cer (raw, json)
Hash identifier: i5XvYFMgLkTLpsj7TJ5tx48PSQwzhDg1eMGCiTJvZJ8=
Subject key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Mar 2026 10:32:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 198.17.7.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30892 (0x78ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 18 10:32:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:21:90:3c:59:23:b7:23:d2:6c:c8:f8:1b:
94:36:57:fd:78:66:8f:27:59:9e:72:5d:c0:47:dd:
ba:9b:b3:6b:14:7b:3c:ab:9e:48:28:50:b8:e8:a5:
8a:02:54:f0:ae:6f:48:93:47:20:fe:c8:8c:02:30:
43:54:b9:b3:c0:bb:0e:41:79:2b:1a:04:1d:ba:67:
dc:f8:3a:23:2b:1e:c5:cb:40:a6:13:0d:78:fc:83:
10:d5:6f:85:27:bb:cb:23:61:2e:57:6b:d9:16:5d:
f2:c9:25:b0:47:50:c9:56:29:da:72:78:5b:d9:87:
25:a2:1a:99:05:16:da:b2:57:ed:8f:aa:f4:c7:89:
4d:17:64:8b:3c:51:c8:16:aa:a8:8c:31:c8:80:97:
b1:1e:31:0c:d2:51:aa:53:4f:c4:46:ce:a3:e5:a5:
1f:fb:c8:44:9e:f0:c4:10:f9:aa:66:25:d3:b7:aa:
f2:91:0c:66:01:a5:d0:d5:8c:5f:36:8b:aa:eb:0e:
72:ba:47:dd:96:43:2c:6b:0e:48:74:87:7e:43:7f:
cd:09:f5:de:78:9a:bb:48:a0:fb:a7:24:99:f2:47:
e5:34:fd:bf:1b:86:b4:50:01:e7:ed:c5:08:4c:66:
fd:dc:b2:07:dc:2a:f7:9b:69:b8:0b:09:d5:a6:c6:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.17.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f8:7d:e2:f1:1d:b0:38:ed:47:9e:7f:46:2f:8a:0d:53:78:
23:3f:ba:27:c9:af:30:96:d2:80:23:35:1c:59:72:a8:df:ef:
75:7a:08:e4:43:6f:21:0a:fb:42:73:88:05:06:4b:00:a5:f3:
62:9a:a1:a7:e7:b2:63:77:cf:df:9a:c8:e1:29:c8:ea:2f:5c:
bd:fb:b1:d2:b9:3d:bd:fe:de:02:83:d8:b2:21:87:2e:8e:f5:
82:41:46:60:54:62:c5:e3:12:58:d0:fa:db:a9:96:e9:a7:f2:
ac:f3:c6:52:ed:7d:d1:0e:e7:d3:d0:73:7e:6f:49:b4:53:fc:
a9:61:e4:6a:94:b4:63:ef:ef:67:8f:20:05:c2:7e:27:bb:f1:
28:ac:2a:a5:a6:90:d7:c7:22:5f:ee:fe:e8:11:32:32:fa:c3:
41:12:58:5c:14:67:66:2a:3d:28:a3:8d:9e:4c:67:64:97:f5:
e3:e6:e8:b7:fa:65:2b:4c:50:fd:ef:78:52:b6:69:15:9c:6f:
0e:66:1e:83:21:ae:62:32:53:42:9a:ef:25:87:06:5c:6b:72:
8e:4c:b4:99:53:2e:51:a3:db:c8:95:30:51:ed:78:b9:0a:aa:
23:8f:37:d7:12:52:07:51:9e:55:63:5d:95:1f:2b:c8:f8:12:
8b:50:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:25 2026 by rpki-client