Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
File: sunaXrOJa-_A39Wn6zDbKTFLuhI.cer (raw, json)
Hash identifier: lm+sjnaRYotNXsZhtqf19A6Q3EnqjEeOsKoCUBPSzcE=
Subject key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F2A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 14:43:01 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32554 (0x7f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 22 14:43:01 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:02:ba:1c:86:89:e6:05:6f:f2:31:50:b3:
96:df:bc:bf:d2:bd:40:80:60:a7:f9:f4:b3:5c:0b:
8b:e9:9d:43:55:45:e5:6b:22:bc:3c:57:2d:a2:4c:
f8:83:31:57:e0:2b:f8:1e:43:38:78:e6:01:2a:7e:
e4:bd:05:a5:c1:cc:b7:fe:c2:2e:dc:72:d5:ec:9c:
95:01:ac:4b:6b:eb:f1:be:c2:f7:ba:61:65:b8:83:
80:3b:76:16:9d:2d:2c:68:32:dc:d6:05:89:4a:fd:
1c:76:32:f1:ef:d4:0e:ad:d1:f4:e5:ce:8f:09:6d:
70:14:77:76:d2:f9:0e:34:6d:44:16:6b:7d:09:d3:
59:e8:32:77:96:bb:ef:06:80:18:70:d8:0f:df:c0:
e3:c4:15:1e:80:fc:c3:2f:67:83:fc:02:f6:31:7c:
8b:21:f9:4e:8b:2f:8d:10:9e:81:d5:87:63:2f:fb:
a7:c0:60:a0:14:e5:86:f7:ab:b2:fa:12:7c:25:c5:
c7:83:11:52:6e:96:2f:c8:58:37:1a:97:d5:f2:8b:
a5:43:2b:bc:eb:b6:c9:fc:ee:92:9d:ec:f1:5d:f5:
6e:6a:4a:b6:fe:35:f0:f5:94:59:fe:a8:55:ef:e6:
03:ef:d9:46:73:83:ad:16:ff:2f:fb:88:cf:80:0d:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.148.0/23
Signature Algorithm: sha256WithRSAEncryption
46:c2:2c:87:4b:30:df:b7:45:91:f5:7f:98:88:c3:31:22:a2:
84:bf:be:3d:af:f3:b3:e2:45:6a:c4:61:cb:88:b4:c7:a3:aa:
19:ad:e0:41:a7:64:f5:ae:9b:76:64:a8:f0:12:9b:91:17:e4:
0d:54:80:ed:59:9d:23:a6:f8:d2:bd:f6:e7:1a:91:38:fb:fa:
6e:1e:cc:c9:95:33:88:b4:c0:f1:2a:99:57:f5:f9:31:18:52:
35:ac:6b:f3:2c:29:eb:2f:51:cc:7c:69:8a:e9:c4:49:26:e7:
bc:36:42:49:8a:25:e1:f3:4a:0a:c1:8e:02:9f:23:03:17:29:
4e:a9:c7:2a:c1:72:44:24:20:50:c1:f5:a6:e8:3c:2c:e6:56:
aa:43:ef:de:55:68:34:b2:01:2d:7d:aa:c3:0d:f2:fb:54:9f:
20:1f:12:4f:45:af:bb:bb:d7:ec:33:9f:ca:9b:3f:a5:32:81:
6e:d5:c9:6a:f3:7f:dc:a7:64:44:31:57:9c:fd:64:77:04:aa:
3d:d6:83:42:55:dc:15:1b:7e:c0:0b:68:0e:77:27:44:1a:c7:
61:97:87:8b:11:18:83:3f:cf:37:17:94:b7:71:eb:a0:38:73:
8e:5b:a0:f8:43:3d:6b:51:b5:b9:b2:e3:4a:df:04:44:3f:86:
ba:6e:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:36 2026 by rpki-client