Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.cer (raw, json)
Hash identifier: rMdAUfKhs3jWjgDAti00AQy1wCvshvCR8Ddn7l251k0=
Subject key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7550
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:37 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.70.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30032 (0x7550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:37 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:68:e0:11:3f:56:c7:16:39:38:2b:c0:e0:
33:ac:db:d1:1d:d6:62:6f:61:a4:34:e6:13:5c:9d:
34:5a:54:4e:e0:9d:08:c4:15:0a:c5:91:0e:12:7b:
30:d7:ba:99:b4:c6:4d:d7:58:ea:56:cf:7d:43:f2:
98:87:04:cd:fe:02:18:a2:6e:1c:61:5a:d1:61:03:
8d:56:07:1b:17:74:60:c4:5c:48:7f:1a:a2:50:41:
53:b1:da:2e:be:4a:8f:e9:8f:fc:45:80:a8:c4:12:
6b:26:05:d9:0a:72:7b:24:98:87:fe:3c:9f:4f:76:
9b:2c:ee:e7:69:1f:0f:16:db:26:a5:b8:8a:03:69:
1f:03:95:4a:b6:f9:50:c4:ce:94:b4:77:ee:50:9d:
89:0f:ad:94:9c:94:03:f8:e4:48:69:19:1b:be:08:
9c:82:44:a8:40:cd:7a:4c:6c:27:3d:7d:5c:2a:2d:
da:95:ae:f1:cb:64:7d:68:ff:00:ad:77:9a:b2:f2:
77:34:f2:b5:42:a9:73:ee:19:22:f1:99:65:13:55:
5c:68:7e:f9:78:26:b8:00:f9:97:40:14:67:a8:a5:
3b:48:e3:56:0d:e5:7e:53:8a:1b:5b:90:29:0f:e6:
6d:7b:76:9b:2c:08:09:6e:45:c8:27:e8:88:9c:cf:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.70.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:81:7c:51:89:48:f6:3f:ed:b0:d0:cf:55:49:c4:4f:d4:e3:
3b:1c:e8:68:cf:4e:a3:d2:6c:bf:57:0b:33:71:4a:7c:ca:85:
8b:67:fb:02:97:5a:8e:9c:63:2a:a1:71:8a:9d:41:2f:93:4f:
fb:40:02:7c:d2:09:fd:a1:7f:58:d6:4a:e2:c4:11:9c:38:8a:
b5:d4:99:af:7c:e6:13:23:41:9e:b0:65:ee:e6:2b:a6:7b:b6:
e1:26:1e:b3:5a:79:7b:e1:ae:25:77:19:5e:e2:9c:c7:51:e5:
6e:ae:69:50:1a:b9:2c:54:d4:3b:52:70:b1:f5:dc:02:60:dd:
ec:e7:be:57:0f:df:74:78:76:d7:65:59:c4:ac:d5:68:28:8d:
15:12:53:21:77:c7:48:f8:7c:46:14:97:97:a1:6e:10:be:fb:
6a:14:f6:ec:91:ba:fb:8d:bd:70:65:3b:1a:2a:59:83:36:06:
87:58:59:7f:da:45:18:fd:dc:56:b0:da:34:c3:f8:62:f8:a6:
ad:b5:80:38:eb:cb:bf:50:12:2b:50:1a:87:a9:ac:91:76:7a:
c6:e5:df:3c:d3:46:53:05:a4:0a:2f:6e:8f:0e:ca:1f:49:26:
a9:d4:c0:cd:5e:73:00:41:d3:86:50:d0:ee:39:d9:60:cb:f5:
e5:d0:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:08 2026 by rpki-client