Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer (raw, json)
Hash identifier: Xo4YcMpbQg7CG5McCOqbrK5gZ04oWIQu9asUWmsn89Q=
Subject key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 781F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 14:51:00 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.106.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30751 (0x781f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 2 14:51:00 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:4c:de:97:74:16:81:7e:92:20:49:91:40:
3f:5f:88:9a:56:ce:7f:c4:ab:16:3c:71:1d:f9:59:
8c:00:4a:dd:46:e4:bb:34:06:76:27:5e:8c:39:d4:
a2:1b:7c:48:1a:7d:c5:e7:05:8d:bf:81:bf:e1:08:
43:28:dd:c4:f2:4e:cb:9b:39:7b:32:41:9a:6b:5c:
f8:80:ed:ba:a2:b8:16:f8:cb:da:5c:49:86:1f:8f:
d7:0c:8a:ad:96:89:b1:e7:bc:a9:5e:96:9b:64:db:
f6:2d:d5:fd:ef:2f:81:f9:1b:ce:e1:86:a3:fe:95:
74:07:28:f5:54:a0:20:e7:7e:60:7d:14:3d:4f:46:
6b:47:7c:a0:e9:a5:63:8b:1d:44:54:31:f8:c0:9e:
a0:37:f4:94:f2:9d:84:d9:cc:15:6d:e6:79:ec:32:
55:27:40:b4:50:08:f6:99:b7:ea:d3:53:4a:67:df:
5d:46:25:5b:65:4e:c7:21:ec:3c:6f:3f:35:64:d4:
31:dd:ea:d3:07:f3:16:e8:b1:ae:c3:48:69:f7:e1:
a3:6a:4c:93:86:81:ac:f0:32:2f:8b:78:33:49:b9:
6e:39:fd:3a:02:d6:c6:95:f7:2e:88:86:89:43:2d:
21:27:c1:67:06:19:2a:cf:60:e1:54:a9:08:96:09:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
39:1d:bb:1b:cd:0c:9a:67:dc:20:50:cd:bd:50:80:f9:fb:42:
5f:b9:c5:ad:6b:26:09:5c:2e:c7:56:10:b4:00:db:84:77:40:
33:df:84:ad:1a:e5:a0:b2:bb:a7:06:d7:3e:fe:9a:49:20:85:
17:4d:3a:3f:e6:49:3f:49:37:bf:1b:27:6d:9a:02:dd:62:92:
fe:2c:7b:3c:2c:ff:59:5a:b0:47:24:b8:8e:8a:4b:13:a9:d5:
22:f0:79:6b:0e:c1:43:66:2b:ad:15:5b:c3:fd:1d:5e:13:c2:
23:32:d0:b8:da:25:a9:c9:51:e3:99:3e:9f:89:7d:bf:cb:40:
cc:d2:59:96:89:de:88:ad:5a:92:e9:d4:a8:f6:2b:82:35:95:
fb:35:bf:4d:76:a0:c1:62:fe:66:b6:bf:1f:c5:71:c9:04:b8:
4f:02:00:7f:5b:77:82:b3:b0:23:20:22:36:ec:0c:2d:bc:1d:
48:10:ac:7a:ed:fe:98:4e:da:c1:b4:c4:ad:bf:9a:32:a9:1f:
a3:cf:55:81:c3:c4:ff:80:ce:46:10:12:12:66:1a:5e:86:f6:
be:b8:83:db:4c:6e:df:65:3f:62:57:e5:34:85:54:eb:26:84:
16:2c:aa:e1:95:f9:de:4b:14:e4:eb:c4:30:d8:5c:e0:43:b3:
04:f3:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:03:27 2026 by rpki-client