Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer (raw, json)
Hash identifier: KWqMZg1Gj6u56ODYLt7qg9QjOzJCMP2dc8/6MURrQW8=
Subject key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7EFE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jul 2026 14:03:34 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.130.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32510 (0x7efe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 20 14:03:34 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:46:ef:70:14:c4:5a:e5:c5:e2:9a:9d:91:
7e:79:18:96:94:1d:38:89:e9:35:95:98:8a:d4:b7:
76:96:db:5f:c0:45:63:31:28:aa:cd:f9:fe:95:2c:
b5:51:74:e1:e5:55:ec:41:b8:b7:a9:61:cc:75:8b:
a8:ef:0f:02:19:d1:48:6a:c2:d8:11:9a:4b:00:db:
25:ff:86:91:2b:10:62:e3:93:f3:de:a7:22:07:6e:
a4:35:a1:5f:06:13:7f:2d:ba:8c:74:4c:86:85:55:
a0:78:b5:83:8c:bc:52:02:b0:c4:6f:ff:9c:77:aa:
9d:73:32:3e:8b:78:52:15:2e:88:a8:3a:7d:3e:45:
64:95:fd:ea:04:ed:40:f5:0b:98:e7:dc:88:56:07:
65:13:e8:5b:cc:e9:77:d5:09:3d:c9:6a:8d:be:9e:
5f:fd:73:6f:40:e8:95:50:c5:3d:57:c8:3a:6f:09:
bb:5f:2a:75:67:05:10:80:48:8d:8c:bb:48:6c:62:
bd:7b:97:3c:57:ce:2b:5f:a8:54:9e:6e:cd:ff:37:
24:3b:b8:0d:f5:4a:84:bb:72:e5:b5:dd:dd:fb:a0:
e0:a5:c7:ed:e1:46:48:da:4d:2f:68:3b:da:95:4c:
8c:43:53:e4:be:fd:3c:29:12:77:6e:77:0b:eb:e4:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.130.0/23
Signature Algorithm: sha256WithRSAEncryption
72:9a:b0:b9:e9:a4:89:24:c7:3c:52:e3:1d:bf:1f:8c:72:27:
22:87:7f:2c:bc:f4:2e:9b:df:43:5f:bc:1b:69:2a:ac:88:19:
4e:34:cc:3c:c0:4e:dd:45:0e:90:03:64:b9:8d:9e:ae:38:81:
69:9a:4d:c0:5e:91:96:39:35:99:9b:d3:19:3f:4a:04:28:82:
33:38:48:f8:b9:8c:1c:a4:5c:95:1a:d9:02:55:32:05:c2:a2:
e9:7b:01:9e:ab:af:dc:1a:9e:d2:0a:00:00:ef:b3:d6:fd:38:
4d:88:69:33:84:fa:3c:53:2a:b5:b1:31:f7:73:87:1d:a8:81:
1d:4f:dc:59:71:b1:73:f3:b9:33:21:bb:80:e5:f5:5b:9a:17:
85:b4:b8:48:e5:b3:64:55:e7:14:3a:38:bd:9d:88:8a:11:b1:
56:70:10:c2:54:54:3c:21:d5:86:e5:b3:de:e6:33:6f:a8:b9:
e3:2a:7f:66:f9:ba:1d:07:96:be:b4:ee:5a:0a:bb:56:6b:64:
fa:42:6e:d4:22:0b:bb:84:46:e1:2c:ba:99:f7:46:ea:27:b5:
87:dc:60:80:36:c5:cd:af:01:fd:53:94:bf:1a:54:8f:70:74:
c7:89:96:11:1c:0a:40:88:87:fc:b2:37:52:08:47:3e:61:58:
57:81:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:05 2026 by rpki-client