
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer (raw, json)
Hash identifier: PmoWxWxif2iSsEXQRVMhQhjOicDQdAQvFy3HOqh7DSY=
Subject key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A85
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Apr 2026 12:36:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 997
IP: 205.210.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31365 (0x7a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 29 12:36:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:a7:f8:40:98:32:48:9b:00:44:7b:35:e6:
8c:ba:ad:39:f1:bd:e3:04:46:a1:fe:88:8a:05:ea:
e9:8d:9f:d3:68:bd:fa:66:ac:58:78:e1:23:ce:71:
24:eb:66:ae:31:8b:9b:be:e3:e0:c8:0e:a1:e3:7b:
3d:86:04:2a:10:7a:45:2e:4c:85:fd:c6:8a:12:30:
14:48:70:b2:05:0b:b0:0f:52:e6:60:b5:c9:ac:d0:
1b:d4:a6:66:57:75:89:df:9f:69:1a:00:e9:89:cd:
27:b2:38:d0:f4:74:fb:23:c8:7c:5c:8b:7a:2e:2f:
c4:b7:24:07:60:9f:e7:d0:c8:c1:8e:bd:b0:82:dc:
24:57:c4:aa:1d:73:33:90:e0:63:3b:1c:90:16:d8:
cb:3f:c2:76:5a:2a:87:49:37:29:89:e7:d6:33:9f:
27:63:0b:49:16:29:53:4f:cb:93:65:9c:84:01:cf:
86:fd:64:4d:7a:09:89:cd:3e:5c:36:00:01:d1:c0:
01:40:23:8d:f7:45:d2:3b:e6:eb:8f:6b:b9:35:57:
44:a8:14:db:7e:1f:17:01:a8:70:6f:e7:79:86:ae:
be:98:8e:a4:89:fc:92:44:5a:09:23:32:47:8e:63:
a2:19:ee:fb:6d:53:c3:0e:b2:9d:34:85:74:0d:bd:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
997
sbgp-ipAddrBlock: critical
IPv4:
205.210.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:1a:62:b4:06:2d:17:95:d2:c2:d7:d7:a4:2a:db:0f:a2:e5:
9d:68:ce:63:2f:56:dd:f4:2b:68:c7:e9:3a:d8:b1:52:89:5b:
ec:36:91:9d:b9:55:7d:80:dc:c8:b9:f0:4e:a1:4d:08:1c:e1:
37:5f:7f:99:df:64:0c:d3:9f:03:b4:1a:21:c1:69:3f:8b:48:
92:e0:5c:cc:ee:ed:3c:54:0d:b5:4d:dd:1d:71:2b:72:25:9c:
a2:3f:49:12:46:16:70:87:84:3d:3a:58:15:99:3e:e0:1d:04:
31:31:d1:88:1b:cc:24:be:74:aa:5e:3d:53:02:53:40:98:c1:
5b:da:01:04:26:47:75:31:7f:92:05:e2:19:d8:2f:78:8b:9e:
04:9e:a1:71:a9:6a:8f:5f:2e:54:b0:49:4d:80:67:2b:10:28:
86:35:d7:7c:a4:3d:81:05:61:0b:57:1e:32:47:58:21:69:e1:
7d:95:64:31:53:66:cc:d4:28:6d:14:66:78:4f:6e:e4:c2:83:
a5:37:65:f5:81:30:d3:db:ec:4d:e1:22:f3:f2:c4:5f:cd:08:
4c:57:43:9e:5b:d9:fd:13:f7:15:15:ca:19:6e:43:c2:0d:34:
ed:cd:52:f7:47:10:ae:71:46:78:ce:bf:b3:1a:99:af:b2:58:
64:72:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:40 2026 by rpki-client