Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
File: rScP3pmx8Qadq473pXaqLCryxvA.cer (raw, json)
Hash identifier: ousUDeW+g50MTJadSvOiFjz0xelVoXtECmPjJazOyAc=
Subject key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 789F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Mar 2026 13:25:40 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 147.41.0.0/16
IP: 147.109.0.0/16
IP: 192.26.232.0/24
IP: 192.107.101.0/24
IP: 192.190.61.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30879 (0x789f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 17 13:25:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:f5:21:27:20:83:9e:c9:11:af:87:49:03:
5a:11:3a:51:3b:82:8e:74:88:4b:b4:40:be:2d:0a:
5a:13:81:ab:11:2e:45:9e:fc:8d:5e:a8:ea:fc:c6:
ba:66:fa:c8:1c:fd:24:a8:a0:c8:67:f6:d2:9c:9e:
42:4f:c0:a3:ef:fc:aa:bb:7f:c0:84:7a:a5:a6:43:
94:d6:82:d5:18:99:60:31:c3:e0:45:23:21:62:95:
9a:82:4b:3e:6f:29:02:98:54:5b:96:3e:cb:9d:20:
bb:e0:1f:3d:99:94:61:1f:92:0c:ac:09:cf:75:06:
2c:a3:5f:ef:f9:9b:ad:44:85:f8:50:f9:86:ee:cc:
0e:bd:4a:d3:66:33:59:17:25:85:83:0f:44:ee:be:
af:38:9f:49:44:83:1d:06:a4:b2:24:63:c5:37:55:
0b:99:e1:f0:28:bd:f4:a3:15:a3:a8:a1:b2:a4:e9:
a5:07:23:0b:dc:e5:81:ad:a7:d2:a0:6d:5d:37:ac:
dd:71:1b:72:b5:59:0f:e2:84:54:e7:60:f4:bb:ba:
cc:be:d9:d6:69:97:4b:9a:9c:b8:1d:3a:7e:70:59:
38:dd:f5:55:75:7b:5c:14:5c:79:d5:2f:33:f3:7d:
31:85:59:a6:bd:17:d6:3d:5c:f1:3d:13:59:68:e1:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.41.0.0/16
147.109.0.0/16
192.26.232.0/24
192.107.101.0/24
192.190.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:25:3b:82:52:f9:a8:7f:13:d7:40:8b:3b:12:a8:e7:d8:7d:
28:88:a0:af:38:73:73:79:4b:e0:ac:33:8f:30:b8:b3:79:4b:
6a:37:78:cc:d0:b7:ab:8c:3b:34:f3:44:dc:ca:35:36:94:1a:
05:74:78:d4:48:0a:9c:97:4f:72:2a:24:f9:8c:1f:1a:bd:2a:
94:57:76:fc:44:0c:75:04:31:58:6f:18:ed:d6:f9:da:19:ae:
e3:39:56:31:f0:a2:09:8b:e8:99:8d:44:b7:5a:0c:f9:65:b8:
76:4f:d9:1f:51:89:74:ce:c7:7e:45:43:15:48:86:ae:f9:1d:
2f:96:e0:6d:77:49:0e:84:24:f4:24:02:c3:f5:fd:00:4a:41:
ed:b1:f7:58:36:0c:ec:86:f9:ac:21:62:6f:0a:d7:f3:b7:31:
b8:d3:cd:89:9d:d0:97:f2:58:9a:6c:80:71:8d:b0:b3:ea:f8:
7d:60:4e:b6:0a:b8:9d:22:b0:0c:f8:3f:ff:98:2a:dd:11:6e:
6f:bb:be:fe:a9:b4:72:50:ad:d6:e1:d4:95:f6:3e:e0:e0:cb:
5d:09:80:c3:eb:2e:40:e5:de:50:82:0b:f8:49:4e:f9:1c:e2:
78:44:bd:3c:33:03:77:24:f2:c5:8f:f5:f6:99:81:ca:38:7c:
f5:bb:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:38 2026 by rpki-client