Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EfvR2MuKdDc1eJkE0XWZDvIdmqM.cer
File: EfvR2MuKdDc1eJkE0XWZDvIdmqM.cer (raw, json)
Hash identifier: c3261YPIv09HiJvCicjcQXwWWW+enzdwWeyQpoPJtZQ=
Subject key identifier: 11:FB:D1:D8:CB:8A:74:37:35:78:99:04:D1:75:99:0E:F2:1D:9A:A3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 79F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/EfvR2MuKdDc1eJkE0XWZDvIdmqM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Apr 2026 10:25:45 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.2.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31217 (0x79f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 20 10:25:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9112762, serialNumber=11FBD1D8CB8A743735789904D175990EF21D9AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:e7:14:aa:7b:3d:09:2e:5a:80:52:2e:0b:
6e:2a:9b:af:fb:22:f3:c2:ea:e0:78:e8:f3:3b:89:
a8:1e:4c:f3:c9:a1:b3:77:4c:82:af:ff:d3:97:70:
24:43:3c:79:57:d4:bf:92:de:86:b2:43:79:c4:ca:
8a:e2:20:21:20:8e:9b:d0:6b:0b:a0:e6:a0:f6:5f:
96:cf:23:51:ea:12:0c:5d:61:62:85:fa:60:11:0b:
3e:ed:44:12:3e:c1:41:7c:05:4d:05:d1:a1:4f:10:
4a:13:3d:00:c2:fb:c0:57:0d:de:1e:8e:53:0e:84:
7d:02:02:d3:62:0f:f0:56:f1:60:8c:f6:ae:dd:8b:
67:8e:2a:ca:50:5c:6b:f6:63:04:60:a6:1b:d8:0d:
f4:4c:9e:e0:9f:61:31:3d:9b:53:6d:0d:a7:1c:e7:
f0:60:0c:44:31:10:2c:22:5d:56:d6:e7:e7:90:a0:
98:66:fc:2b:90:35:62:41:b4:d2:94:a9:6c:53:6b:
3d:3f:b4:09:7d:40:24:7e:bc:55:ba:aa:9a:fe:a3:
93:53:aa:dd:98:a6:80:c4:48:df:c7:91:57:f6:5d:
df:c8:e4:11:6b:1f:27:2b:26:3b:4f:c9:bc:35:76:
46:63:46:f0:b2:ed:14:95:82:83:ed:01:b7:b4:2d:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:D1:D8:CB:8A:74:37:35:78:99:04:D1:75:99:0E:F2:1D:9A:A3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/EfvR2MuKdDc1eJkE0XWZDvIdmqM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.2.0/23
Signature Algorithm: sha256WithRSAEncryption
10:e5:ab:ac:db:32:39:2f:71:b8:23:f6:33:a5:1e:6f:ea:13:
3a:d4:01:15:da:99:ad:0b:3a:83:63:ab:40:81:75:fc:2f:29:
02:75:fd:6d:f3:73:b3:73:ca:b5:74:0d:2e:86:0c:f1:0e:f5:
26:25:9c:a0:3b:9a:eb:b3:b6:65:fc:8f:1a:8f:31:84:88:1f:
e3:1d:76:4c:a7:64:5b:9b:86:a1:11:db:42:e5:fd:51:f6:79:
98:48:36:b4:63:4a:64:8f:97:ae:f6:fe:94:bc:ba:14:51:02:
81:cd:68:07:df:af:6e:87:52:89:ab:31:6b:85:5b:b0:74:9f:
6b:b3:fc:54:7a:76:7b:1e:ee:3e:7c:ae:f3:f8:83:db:f6:76:
5d:68:d5:df:59:52:6a:dd:eb:4b:83:c8:14:e4:bb:57:6f:a3:
73:1f:db:3d:62:6b:92:a0:92:f7:67:03:9c:c8:5b:b7:b6:37:
62:7b:ef:2b:9a:5c:e1:20:2c:8e:8a:65:07:2b:c7:61:09:c8:
9c:ef:d0:7e:6c:fa:7f:6f:ec:2c:3e:02:5a:15:fb:22:35:fc:
d4:22:03:60:34:17:32:76:91:96:ae:9e:db:22:3a:ae:d6:d4:
2c:e3:49:24:e8:c7:88:90:d2:fd:69:a7:7a:4c:5d:c3:ce:b3:
5a:30:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:22 2026 by rpki-client