Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer
File: IlQptnO9Vfmh-WM1JYIlrig2FP4.cer (raw, json)
Hash identifier: Dsr2aIwDljEXK4AeJdXV7rw1eIVxbGHVbLin27D7Jfs=
Subject key identifier: 22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F48
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Jul 2026 16:01:22 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.42.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32584 (0x7f48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 23 16:01:22 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A914C9DC, serialNumber=225429B673BD55F9A1F96335258225AE283614FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:ad:5f:9e:e6:44:7c:b1:b2:2f:c0:a2:46:
9c:ff:2c:02:f6:3d:7f:2b:ed:b4:91:2c:b4:88:76:
ad:65:3f:20:73:40:22:5f:92:22:52:8f:91:a6:a3:
16:f0:1b:46:af:ec:bf:1a:e3:99:c9:63:82:22:31:
f7:e2:7a:3d:54:33:90:f8:f4:dd:4c:28:a7:3d:dd:
c5:ea:cf:d1:ce:92:d6:fd:16:6b:7f:86:fa:68:ee:
7a:d5:6b:65:54:db:ef:bb:83:1d:0a:dc:c8:2e:d3:
53:0c:86:f4:1f:6f:8d:35:91:e8:c4:2a:cf:ff:1d:
1e:9c:ac:fe:a3:bb:c8:35:4a:08:bb:cf:a7:5d:e6:
f0:c4:79:25:1f:37:4b:d2:3a:db:c9:58:9a:fc:cf:
6f:da:d9:c0:ef:3b:cc:fd:81:44:fc:5a:98:3f:cd:
2d:2f:7d:6e:2e:fe:2f:03:6e:a0:dc:4a:1b:2f:fb:
a7:87:e2:f9:42:67:67:c3:d0:4a:48:46:be:19:ae:
85:0f:53:0f:9a:66:68:b8:61:f2:5a:60:ec:91:f6:
b6:e2:ac:b3:b8:63:77:1a:61:fe:22:c6:49:58:7f:
2f:d9:8e:03:35:f0:eb:22:26:7d:b7:5f:a0:71:75:
19:f9:ec:95:67:2b:4e:68:f0:45:78:50:7e:5a:64:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:5a:ab:15:61:6c:94:ee:9b:69:59:3d:f6:8f:df:86:c5:99:
a6:48:15:39:81:b1:7b:70:fa:19:6b:55:3f:d5:2e:7f:47:2f:
3b:09:25:8b:ca:3f:36:80:17:cc:2c:63:97:10:b9:25:fe:94:
b4:c6:63:c8:93:37:0d:a1:e2:b9:47:7a:2d:00:cf:a6:cb:52:
ce:f3:5e:19:11:b1:d4:9d:7b:b1:fb:5b:7a:d2:c6:05:48:1f:
48:52:93:8d:f0:ba:56:8f:07:d2:d2:89:ac:b4:28:90:a4:c6:
86:70:fe:cd:36:97:ee:45:21:37:a3:fa:f0:4a:7c:75:d2:fa:
30:f6:50:a2:d2:a6:10:1d:3d:bd:7a:42:bb:e5:5f:35:0f:8e:
9b:ee:a5:87:db:84:37:be:13:74:a2:41:7b:04:99:04:cf:a2:
a5:46:1f:20:7a:7d:8e:2e:96:8c:b8:1c:02:17:d8:41:40:6c:
2f:93:96:1c:aa:08:b3:ad:3b:f4:89:40:b0:36:8d:7f:c2:63:
c7:3a:8d:59:e5:b9:33:07:d4:1a:24:1f:da:cf:7a:99:f6:17:
24:72:9e:d7:0e:79:cf:d1:18:9e:c5:2e:94:d1:e3:3f:52:b5:
a6:f9:42:75:2f:9b:d4:74:53:ea:67:f6:96:94:99:4a:8f:80:
e6:04:39:ae
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICf0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzIzMTYwMTIyWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0QzlEQzExMC8GA1UEBRMoMjI1NDI5QjY3M0JENTVGOUExRjk2MzM1
MjU4MjI1QUUyODM2MTRGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALTSrV+e5kR8sbIvwKJGnP8sAvY9fyvttJEstIh2rWU/IHNAIl+SIlKPkaajFvAb
Rq/svxrjmcljgiIx9+J6PVQzkPj03Uwopz3dxerP0c6S1v0Wa3+G+mjuetVrZVTb
77uDHQrcyC7TUwyG9B9vjTWR6MQqz/8dHpys/qO7yDVKCLvPp13m8MR5JR83S9I6
28lYmvzPb9rZwO87zP2BRPxamD/NLS99bi7+LwNuoNxKGy/7p4fi+UJnZ8PQSkhG
vhmuhQ9TD5pmaLhh8lpg7JH2tuKss7hjdxph/iLGSVh/L9mOAzXw6yImfbdfoHF1
GfnslWcrTmjwRXhQflpk0FcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQiVCm2c71V
+aH5YzUlgiWuKDYU/jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEM5REMvQkRFNEIxRDI4NkFGMTFGMTlCMjdDNDJCNzRBMzBGQkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRDOURDL0JERTRCMUQyODZBRjExRjE5QjI3QzQyQjc0QTMwRkJDL0lsUXB0bk85
VmZtaC1XTTFKWUlscmlnMkZQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC/KjANBgkqhkiG9w0BAQsFAAOCAQEALVqrFWFslO6baVk99o/f
hsWZpkgVOYGxe3D6GWtVP9Uuf0cvOwkli8o/NoAXzCxjlxC5Jf6UtMZjyJM3DaHi
uUd6LQDPpstSzvNeGRGx1J17sftbetLGBUgfSFKTjfC6Vo8H0tKJrLQokKTGhnD+
zTaX7kUhN6P68Ep8ddL6MPZQotKmEB09vXpCu+VfNQ+Om+6lh9uEN74TdKJBewSZ
BM+ipUYfIHp9ji6WjLgcAhfYQUBsL5OWHKoIs6079IlAsDaNf8JjxzqNWeW5MwfU
GiQf2s96mfYXJHKe1w55z9EYnsUulNHjP1K1pvlCdS+b1HRT6mf2lpSZSo+A5gQ5
rg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:53 2026 by rpki-client