Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
File: z8OBRZAZiWAcekIm8uBfuM-SloM.cer (raw, json)
Hash identifier: jkrWnZutCv5judneLSp7Anu4TcgEA4UxnQ0qcpyWz5E=
Subject key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F08
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jul 2026 23:23:31 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.128.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32520 (0x7f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 20 23:23:31 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:f9:b9:06:ff:6a:5f:b6:1c:e1:db:3f:ff:
ff:a0:8a:37:6d:b8:da:a2:5f:39:ec:ca:cb:1e:f4:
90:95:00:60:a7:82:f1:c1:1f:1c:51:aa:46:6e:7b:
7a:45:8e:bc:e2:f8:a6:04:b9:77:ab:17:15:a8:c5:
98:0f:c9:c1:e1:59:83:64:ac:99:94:d9:84:38:86:
b4:fa:76:37:b2:44:94:4e:a8:58:46:c2:f1:76:d5:
cd:2e:a1:b2:7f:4e:64:6f:3e:df:a2:44:fc:94:66:
0f:11:e7:75:90:80:db:97:ac:ca:f8:3d:a5:fa:4d:
74:91:0e:69:ae:58:24:90:cc:c7:3c:d5:ce:6b:11:
34:2f:14:0b:84:fb:e9:91:4b:74:5c:9b:46:33:5c:
b4:73:c6:88:78:e1:a8:4e:ae:1e:04:af:6a:41:32:
76:74:3f:d3:d5:aa:d5:c4:81:ce:02:ed:fb:54:34:
31:e4:98:f4:88:26:50:84:fd:bf:0b:d5:74:30:90:
30:c4:45:8c:0b:89:62:d3:7d:96:eb:41:a4:19:80:
57:8c:ad:78:d4:e5:44:10:9d:2e:58:62:24:7f:77:
c3:62:a2:96:cf:41:ad:c4:8f:88:e5:76:07:0f:3d:
9d:7b:29:e5:c6:a5:a6:06:16:b6:61:14:6d:fa:34:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2e:a8:bb:25:30:c1:73:ef:8e:9c:8a:90:3e:9f:65:bf:42:
2f:37:bc:e4:ae:7a:2c:4e:bc:10:a0:ce:6a:65:55:78:27:af:
05:d0:c4:f4:d9:77:78:13:69:fc:61:b7:01:37:e7:3d:75:f3:
ae:1b:25:35:3b:8d:a7:ac:7d:7d:49:ac:77:4a:10:1f:08:ac:
4c:0b:b2:c5:3b:ef:cf:35:c7:68:08:96:f9:4b:d2:89:5e:b2:
14:9e:eb:7e:8b:88:67:99:73:7a:6e:20:e0:e2:b9:e3:f1:a6:
ee:e3:5d:15:e6:a0:ae:28:0a:4e:06:cc:fe:5e:cd:36:8d:cf:
2c:92:4a:86:34:7b:d7:da:8b:38:a9:e5:c2:dd:7d:0e:88:d8:
cc:43:30:19:d0:81:11:87:db:b1:ec:ee:b6:a9:bb:6f:c4:fd:
a2:dc:bc:41:c2:54:db:8c:2f:7b:56:c2:45:7a:17:dc:5b:e9:
a0:13:f7:90:89:52:09:9a:6d:fd:8f:db:ec:b2:8b:ea:da:2b:
27:fe:94:ed:bd:c6:a0:a9:d7:06:4b:f7:c6:d8:ba:c3:8e:54:
b1:58:94:1f:ae:3b:5f:6f:f9:64:67:7a:3e:d8:4c:7d:92:5e:
ed:91:9b:e0:9d:d2:ed:d4:33:a1:72:20:8c:56:9c:4a:84:46:
f6:f5:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:44 2026 by rpki-client