Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
File: DsmozWa374HQeaCEKyY5Zf50-NA.cer (raw, json)
Hash identifier: ND36JrWnNdhkYRUCdoZYtym5XLI5M7pqibc+pYBYCoY=
Subject key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A1B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 05:04:46 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 167.30.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31259 (0x7a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 23 05:04:46 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:d5:b8:be:f9:0d:be:2f:14:3a:ef:c0:56:
12:8c:11:cf:c6:fb:4c:9e:47:66:22:ff:56:24:ef:
a6:d1:57:b2:66:00:76:5f:61:8a:29:0d:72:64:47:
85:ca:54:61:0f:94:37:ec:66:c0:54:31:e8:cc:fe:
58:43:76:25:9a:a4:72:16:9c:5b:a3:19:1e:8b:d8:
1a:6a:8e:af:37:06:cb:6f:8c:b6:cc:b8:03:7f:0d:
34:60:9e:b7:f7:4b:3c:f7:09:96:63:75:3d:df:da:
59:de:9a:1a:d4:3b:5c:6a:9a:e8:b2:f9:5a:3b:3a:
2a:89:99:d4:dc:81:1c:5b:10:9c:15:ac:e0:b6:e2:
85:ee:17:fe:fa:f1:a7:1f:47:3d:13:7b:43:c5:39:
f4:7e:78:68:4c:5a:e9:b0:69:63:0b:5a:3b:dd:36:
65:77:4c:c7:01:ed:2c:01:aa:dc:ef:26:ad:eb:0d:
bb:3b:6b:0e:9c:db:ca:1d:08:ce:d8:99:83:04:d3:
fe:84:88:75:2e:d2:c7:be:1d:b5:fa:31:58:78:8f:
9a:7b:e8:15:e9:0f:1f:f3:f1:40:56:95:81:bf:82:
22:65:25:de:0e:29:d0:2d:25:7a:a4:10:65:30:cf:
62:34:cc:78:61:ad:fa:6b:e9:20:10:10:df:00:fa:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:fb:11:7f:6c:a6:39:2b:c3:33:9f:e2:6e:32:78:79:ae:be:
07:d8:de:c4:e0:5d:84:e9:82:89:94:ad:a8:3b:f3:9c:f3:80:
9a:00:63:8d:12:bb:c5:63:2e:d3:0b:6e:c0:34:cf:4c:43:15:
01:14:93:5f:ae:96:3e:66:00:4e:64:0f:b0:0e:b1:4e:3c:a6:
df:01:88:eb:3f:33:53:63:6c:74:4c:32:26:6a:be:a0:70:3d:
ae:08:89:37:b7:0a:d5:11:84:78:e1:d1:bf:f2:e6:71:93:82:
62:76:86:4d:2a:ae:94:3e:0f:a0:be:9b:bd:48:af:1c:3c:f4:
23:dd:a2:e9:1c:31:8a:33:e1:92:1c:a6:ec:45:86:5f:a2:ae:
95:6c:40:9f:a8:85:7e:f9:70:16:4f:a3:cd:0e:af:49:f5:94:
18:09:35:1b:d0:f5:92:62:9c:8d:5f:91:d9:fa:93:c9:de:39:
52:3f:a1:d6:60:ba:8c:d4:9f:4f:55:51:39:35:df:0c:27:e0:
77:fb:bb:ff:ce:b9:63:7e:4e:c1:6c:2f:6e:c7:15:9e:16:07:
ba:03:c4:76:f1:0d:57:55:db:87:06:ae:f2:eb:7d:6d:fd:17:
16:a7:e8:8e:dd:2e:22:e5:dc:f7:2a:7b:b4:b8:c8:53:7f:39:
8d:d6:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:21 2026 by rpki-client