Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
File: 3UhfmiMRbUEQwHvThx70phTsTSw.cer (raw, json)
Hash identifier: IyFArxtIbCNX0UbBaDPRg/6nEkQv3JlGoC+1yWt6riE=
Subject key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BEB1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Jun 2026 12:44:49 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 203.12.115.0/24
IP: 203.34.104.0/24
IP: 2001:df0:da40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179889 (0x2beb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 22 12:44:49 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:89:fa:b3:ac:77:07:fc:17:79:4c:e1:a3:
a9:d5:c9:d8:81:4a:db:16:17:47:10:3d:86:20:9a:
4e:5e:00:dc:cf:a0:71:2c:5c:88:80:4a:3b:4e:03:
ec:d2:8c:e5:6d:bc:c4:85:74:e4:7d:70:87:04:be:
b3:55:6a:bc:0e:47:f2:fb:83:61:6d:83:43:96:56:
55:1d:8b:19:49:fa:1a:a7:45:36:de:83:40:f9:be:
30:28:67:d2:29:d0:0f:62:e2:95:d1:24:78:87:9c:
6d:83:5a:42:6a:db:08:90:64:0a:86:b9:9f:f4:1d:
81:57:29:42:b4:16:00:2a:1d:4e:62:d7:44:02:c4:
a3:85:73:db:f0:cf:d5:01:27:86:4d:37:88:03:9f:
ff:eb:9b:eb:e9:8c:98:ba:cd:ff:e4:1f:8c:ee:a5:
37:37:88:ac:17:ae:e1:e6:24:d9:82:9f:56:e1:cb:
10:e2:35:3f:79:9b:2a:49:89:aa:51:40:43:33:a5:
8e:df:e8:1d:43:fc:f1:8c:4f:18:08:b7:96:3f:7f:
a1:12:f6:d3:85:d4:f3:37:65:be:ee:5a:30:22:a0:
a8:25:55:b7:7b:e4:05:7b:7e:cd:96:7e:fc:f4:8f:
db:6b:bb:b9:08:9b:9a:c7:ee:60:4a:3a:79:63:ca:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.12.115.0/24
203.34.104.0/24
IPv6:
2001:df0:da40::/48
Signature Algorithm: sha256WithRSAEncryption
0f:10:de:1c:43:c3:95:45:3f:b5:a3:0e:3e:4b:28:af:0e:1c:
94:b3:06:bd:ab:b7:23:b9:d1:12:af:1b:11:4f:98:c7:91:c6:
21:10:3f:80:64:bc:c3:6b:38:77:99:39:61:f6:4b:7e:a4:77:
b8:93:ed:54:16:cd:e1:90:93:64:07:3d:dc:c7:cf:d3:bd:68:
c0:fd:0d:78:80:8b:d7:80:5b:28:5b:bb:ff:e9:fa:95:e5:68:
7a:3c:4c:9e:8f:84:3f:a5:de:d3:57:29:50:50:d6:29:53:63:
8e:e4:dd:f2:ed:7e:8b:a4:0b:f2:05:47:39:a9:af:5b:0c:3a:
74:c2:73:67:31:dd:c6:46:7d:27:5e:04:2b:6c:a3:21:cf:f2:
4a:e4:e4:b3:c6:6f:8f:2c:f2:d1:d0:3b:0f:66:ca:92:bf:4c:
b0:59:86:78:05:45:02:35:43:67:49:6a:df:5e:5e:fb:a6:9d:
51:9b:5d:16:1d:3d:9d:36:82:f7:9b:c4:07:da:f9:a5:06:42:
29:bd:6a:81:96:72:92:f3:d3:58:08:44:19:67:29:f7:be:55:
28:71:d3:b0:6f:59:cb:db:9e:48:4c:b8:c7:e4:c2:51:08:dd:
32:5d:ce:6b:2d:e7:8a:03:56:78:53:89:75:4b:24:ad:54:3a:
df:c9:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:24:37 2026 by rpki-client