Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
File: mpXY8Mq1144dbKm5o7JX446MfVs.cer (raw, json)
Hash identifier: nNLqt1OdffNjZx9y3cgNtW/0iWR+HdDJDlzxFgByfFY=
Subject key identifier: 9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 79EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 19 Apr 2026 20:58:21 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 140.168.252.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31210 (0x79ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 19 20:58:21 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A915CF84, serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:49:2b:1c:ad:54:42:43:8e:9f:b0:2a:1c:
11:ba:33:a7:56:e1:72:25:6e:c2:36:56:ca:95:8a:
e5:71:8e:a4:72:8e:cc:a0:1e:3e:95:db:9a:0e:d5:
ef:90:18:0b:72:9d:2a:92:28:40:aa:38:75:25:2f:
7e:4e:51:a9:c4:9a:8e:b6:66:e3:5e:3c:92:85:76:
e5:12:1b:50:64:23:a6:d2:df:f6:1a:2a:9c:ed:75:
50:ca:22:6c:45:2d:32:70:c0:34:1d:73:35:ec:3c:
53:2f:08:1d:3f:58:6a:81:7c:c0:e9:a7:c1:d1:d9:
33:b3:78:36:99:c1:3e:2a:6a:a2:02:55:f9:c6:76:
26:3a:2c:a2:34:a5:4c:13:f3:a3:22:5b:6e:f7:47:
d5:d9:7c:e7:4a:10:79:da:d4:0e:45:50:01:39:83:
f4:cf:4a:21:1f:0c:b0:7f:dd:2b:48:f3:71:ae:89:
30:c3:3f:a0:eb:f9:fc:6e:be:e3:75:2f:9a:48:67:
30:81:3b:80:f1:eb:72:bd:2b:15:ff:4d:ce:b8:26:
c9:cc:f6:40:c0:ef:78:3f:e6:81:b0:52:cc:71:f8:
07:0d:ce:48:35:bf:c8:a3:23:c6:6e:2e:19:88:02:
cb:27:bc:de:d8:a3:f9:2f:da:c2:14:c9:35:ae:72:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.168.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:17:24:a7:77:c3:18:83:2a:a6:32:37:08:12:21:ca:d7:a6:
cc:09:7c:35:88:5a:08:7c:c4:47:f6:ca:ed:a8:67:dd:d6:15:
bd:ae:ef:7b:36:97:83:ea:7c:26:24:d7:e4:ab:79:b9:2d:7d:
ef:dc:b1:ab:a1:ca:b1:e7:a1:d9:68:f0:06:83:b2:91:82:04:
31:8a:67:1e:4e:6e:83:70:8b:67:da:3c:15:e5:34:f4:b3:1e:
1e:42:9e:37:93:8e:dd:f4:cc:0d:cb:e9:b0:64:7a:bc:f4:6b:
1d:cf:54:fb:3d:21:9f:34:23:52:0c:97:ff:bb:8d:a3:56:19:
29:9b:52:38:e1:0c:6a:30:d8:83:9e:0b:97:ba:2d:ae:a8:97:
cf:92:8a:ea:46:ea:c0:fd:d6:10:21:bc:4e:2a:20:dc:18:0e:
48:57:a8:2e:2b:1c:44:a1:f1:43:8a:e6:e3:43:58:b1:a3:ad:
81:5a:d3:55:92:e7:eb:0b:da:17:c6:40:93:fe:d2:57:91:17:
88:aa:53:7b:07:da:49:92:a4:c9:62:dd:28:32:02:7c:5e:9b:
38:0f:b5:1f:36:cf:e8:fa:ba:6f:98:f7:83:7b:7a:33:1b:0e:
b3:20:ca:3e:d7:38:52:6c:fa:c1:06:ef:20:ee:e7:49:f2:f7:
64:36:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:32 2026 by rpki-client