Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I58TWYV0hKnEkCCp2sIKlBl9qw8.cer
File: I58TWYV0hKnEkCCp2sIKlBl9qw8.cer (raw, json)
Hash identifier: OLU9BSsDYTdeMuijb5GC1oRp5BK4dBXsx55ccd7HqZc=
Subject key identifier: 23:9F:13:59:85:74:84:A9:C4:90:20:A9:DA:C2:0A:94:19:7D:AB:0F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7EF5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 19 Jul 2026 22:45:04 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.109.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32501 (0x7ef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 19 22:45:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91B67D6, serialNumber=239F1359857484A9C49020A9DAC20A94197DAB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:aa:b2:53:b6:0c:6d:8b:68:1f:19:54:d5:
68:ba:b5:63:39:67:46:e8:9e:98:47:73:91:eb:99:
84:a3:f0:4d:11:15:bf:74:7f:3b:11:95:33:9e:4f:
99:6b:6e:07:dc:be:a2:7e:9d:f7:d2:54:fb:b8:9d:
80:5f:42:c4:87:19:b7:5e:bf:ea:93:34:61:1d:43:
2e:e8:9a:a7:e0:4f:3d:ae:9f:6b:35:e4:75:44:5c:
33:5c:91:a8:5d:0c:72:cc:b7:27:4a:d1:4a:e0:28:
23:0a:71:2c:4a:8f:91:b7:42:ec:ca:7f:49:81:e9:
b9:36:1c:a8:1c:68:82:7f:c5:23:d0:f1:e1:6f:d8:
3e:07:01:ad:74:e4:04:e3:2a:08:05:8b:35:6f:5b:
6a:47:2e:d5:e0:13:3f:38:aa:47:ce:06:06:12:78:
39:7f:1e:52:68:bf:5d:f2:73:d8:54:1d:6e:00:87:
7a:89:44:05:e2:c6:d8:f1:01:85:44:89:a3:0d:21:
04:21:c2:47:6a:0c:88:cd:8d:d5:6e:9c:23:d4:5b:
a5:3c:60:36:50:53:b6:c2:5b:10:75:81:2e:98:d7:
47:c1:c3:af:92:3a:f2:0e:54:29:0c:78:8d:1f:62:
38:19:04:52:2b:de:b1:a9:11:25:26:b0:ea:d5:35:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:13:59:85:74:84:A9:C4:90:20:A9:DA:C2:0A:94:19:7D:AB:0F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.109.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e1:ff:39:1b:80:81:40:fe:41:9f:e2:98:39:22:9d:67:5c:
a4:01:77:0a:e0:42:a1:4d:13:ba:18:32:7f:3d:45:90:f1:6b:
8c:6e:ac:28:7e:8c:d0:c8:92:05:51:76:23:34:e3:14:b0:ef:
90:e9:11:9e:99:45:ba:f6:d4:5b:18:d6:35:1a:6b:25:e2:47:
ef:14:c0:51:3e:b7:ad:94:ee:71:df:ff:ce:fe:44:1d:0d:c8:
a8:a1:a5:0a:90:2f:29:0f:13:76:d3:31:e6:52:90:74:67:d6:
25:ac:70:21:bf:99:00:c5:67:70:fb:91:1e:b7:aa:02:11:76:
93:11:af:84:b3:cc:1d:27:25:c3:72:54:47:ef:97:a0:76:ad:
8a:a5:19:5d:da:e6:24:d2:2a:b1:98:32:fb:a7:b0:b7:34:70:
65:05:75:32:79:90:bc:4f:18:6f:a6:e0:77:47:90:7e:1f:6a:
3b:7e:db:13:63:8a:96:fc:51:46:56:02:f0:37:fa:78:1c:3d:
1d:db:ce:fa:76:8f:15:06:7c:99:c1:f2:ce:c8:ec:5e:fe:f2:
db:d3:58:cc:81:2f:f0:66:ea:e5:ef:f6:0b:63:1c:9d:7a:f9:
af:21:4b:ec:55:11:25:79:5c:74:ee:09:2f:0b:1b:7b:d2:d4:
3d:55:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:35 2026 by rpki-client