Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
File: uRokzwRxERfIw7omSjM5Xad_kbQ.cer (raw, json)
Hash identifier: A4nlZ00HHQjPxQuc/OZn/Mg4IuvdtqIS5I72Tp+DSHg=
Subject key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8152
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Aug 2026 12:39:37 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33106 (0x8152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 26 12:39:37 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:81:09:66:43:98:49:e0:e3:e2:0b:5b:f4:
99:cd:09:e7:e2:3e:9f:9a:7f:95:ee:0a:29:8b:c2:
59:82:5b:fa:e1:2e:c4:fe:8c:fd:25:1c:98:a3:fb:
7f:6d:a1:92:98:45:a1:57:dd:a4:38:82:eb:94:04:
03:aa:dc:4d:f8:78:e4:71:60:55:cf:dc:3a:b4:22:
77:93:e9:95:ed:3f:b5:28:e6:92:9c:7e:c7:8c:d3:
0c:b7:d2:92:cd:bf:1f:0d:e6:af:12:f5:3a:2d:d8:
6a:3d:27:62:f7:b5:9d:71:84:ea:3e:63:06:84:d8:
83:05:ee:f0:92:48:fb:c3:ab:71:4f:88:6b:a8:df:
df:3b:ce:49:19:15:8e:d2:8c:ff:ca:2c:fb:b7:a7:
2e:f8:6c:5d:69:7a:20:20:59:67:0d:dd:18:79:72:
36:9d:e4:db:0c:56:a6:5c:95:eb:56:30:73:4d:45:
9d:26:59:cc:83:45:de:87:fd:d8:f1:7b:60:57:5e:
2c:b4:44:71:2d:ef:76:a4:bf:bd:60:8f:2e:ee:24:
1b:5c:db:5d:79:86:b0:ba:f3:79:6d:ce:f9:6b:9f:
79:59:6a:7f:a5:cd:c2:19:5e:e3:b6:6c:df:40:94:
95:f5:3a:23:fa:55:85:8c:b9:0a:4b:3f:ff:44:3e:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.32.0/23
Signature Algorithm: sha256WithRSAEncryption
43:81:33:43:d3:89:2d:ba:66:56:c4:e8:ab:a0:2e:d3:93:68:
d5:15:79:28:02:7f:e1:ff:0e:c4:65:92:45:cd:02:a9:93:dc:
4d:2a:e8:25:4d:a6:7e:3d:6c:ed:f8:4d:03:54:91:51:3a:41:
6e:86:82:6d:dc:f2:f7:cb:b2:08:80:72:b5:e6:99:af:0b:b5:
38:3b:80:7b:a0:e7:d4:82:62:a6:53:c5:a9:7f:6b:eb:04:c4:
91:af:0d:82:bc:71:e8:1d:ee:48:de:53:75:8f:3f:e2:cf:4c:
5e:95:4e:0f:69:ae:af:e9:77:db:7f:47:08:d9:0f:80:36:ec:
06:56:ea:aa:1e:90:23:9b:4e:50:d8:ea:db:3e:af:b7:80:b8:
49:81:26:9c:10:0e:fb:3d:1d:d4:bb:60:46:23:59:60:37:a3:
59:8f:2c:db:f1:c3:2e:08:ce:19:8c:71:2e:ae:03:9e:90:83:
e5:82:6a:41:69:ca:bf:c5:9b:09:89:9d:bf:71:bd:c6:ca:96:
ec:9f:98:f0:52:cf:2d:ca:32:fc:7e:35:c8:cc:c0:f7:00:88:
69:02:ca:3c:22:1c:fe:d7:48:9a:1b:ed:11:e0:93:a4:35:01:
e4:1f:53:17:63:6e:61:4d:dd:48:a9:23:73:3e:7d:26:d3:e4:
76:76:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:23:49 2026 by rpki-client