Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
File: I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer (raw, json)
Hash identifier: NfjCxHJ3BRqnaLXSbC4tCDw7TFqU73K88UDAbJlc3kk=
Subject key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78F4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Mar 2026 13:58:35 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 137.132.0.0/16
IP: 165.101.120.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30964 (0x78f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 26 13:58:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:4d:19:c8:2d:94:e7:8b:b7:a7:9f:02:c7:
13:1e:ba:c2:df:5e:f2:d0:3e:31:b4:87:2f:57:e2:
63:ed:41:4b:df:f9:36:5b:16:97:9c:b9:d9:2c:71:
dd:28:33:24:65:3a:1d:97:40:f0:96:cc:d2:6e:c1:
e0:13:72:30:e4:38:58:32:0a:09:82:c7:37:86:d9:
f9:27:07:ff:65:d5:d1:95:43:32:ee:6f:c9:05:06:
4c:9b:34:99:63:58:42:46:e0:cb:4f:8c:8a:9e:ab:
12:74:e6:fa:db:36:1e:29:83:6a:51:d8:34:42:26:
bf:c9:ff:10:42:8c:db:01:59:94:48:fb:63:83:c0:
9f:63:13:35:8b:29:2f:09:88:39:b0:ee:ce:57:d0:
af:d2:5f:3e:e2:e4:c6:fc:50:ca:79:f3:87:5c:7d:
e4:de:47:92:45:0e:94:fc:e7:57:64:02:79:37:cc:
b8:c0:17:d3:d8:6b:00:f9:03:70:fb:38:cf:5d:5f:
cb:65:bb:c9:39:49:14:5d:8f:cc:4c:7e:35:22:da:
fc:87:e5:c8:4d:85:63:33:a5:17:8a:27:c5:05:db:
26:4f:5d:73:9c:d6:f7:78:98:38:eb:23:69:37:ad:
3f:77:e7:38:8c:4f:9b:19:be:9a:da:1c:41:0c:32:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.132.0.0/16
165.101.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:93:06:73:75:8c:88:a7:2c:bd:36:02:50:6f:17:9c:2b:e9:
d7:06:1e:a7:a9:44:c3:22:87:ea:5a:8c:be:87:13:08:b3:04:
d8:ef:6b:b7:0d:67:70:41:26:4f:01:07:59:7e:5f:b3:1d:16:
c9:e3:2e:f5:b1:54:26:7e:49:4b:db:27:46:c0:8a:e0:48:8f:
21:33:31:8d:44:37:d2:f9:c9:d1:e7:6b:43:e2:36:f9:b0:43:
72:bc:a9:92:57:5e:6c:bd:7e:a4:dc:6b:91:6a:55:e3:7b:e5:
4a:b6:88:b2:f3:b9:e7:23:03:25:ae:2c:ff:b3:65:17:a9:0a:
fa:06:eb:b5:64:95:38:25:99:21:b0:2b:9c:65:40:0e:c9:f5:
05:e1:d9:e4:48:af:b6:ff:cd:f5:0a:64:38:0b:41:02:ee:8a:
91:2b:ee:b2:a5:0c:af:82:54:0a:78:2b:92:8f:3b:1c:5a:fe:
f0:4a:09:52:46:cf:1d:b4:90:26:99:6b:77:7f:c5:bc:ef:c6:
e3:b8:99:51:fe:2b:34:d1:a8:a6:3d:0d:d6:eb:08:9e:37:b4:
37:ca:9c:66:05:74:7a:f6:7c:85:4b:ad:86:6a:86:76:01:fe:
a0:23:6b:6c:e6:ba:58:64:40:ba:04:8f:c5:15:e7:bd:6d:95:
f3:df:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:45:47 2026 by rpki-client