Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
File: 1bTWxIC76WuryHIkhQJdTEX-x4o.cer (raw, json)
Hash identifier: eAtWW5GGy+mhAxOzEQiHcnRZNszEZGPfJdJvAMDo8uA=
Subject key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7974
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Apr 2026 14:25:29 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.2.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31092 (0x7974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 2 14:25:29 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:73:54:66:3b:79:9a:6c:40:83:3a:05:e0:
ac:7a:60:2c:2c:fa:f0:d8:9e:4f:d0:24:d1:21:94:
e4:38:71:73:da:35:30:68:88:c7:34:94:37:18:38:
45:d8:37:b3:b8:41:51:9f:ac:4d:c4:03:5c:2b:e9:
6a:a5:f8:a5:2e:93:e5:97:f7:7d:aa:f5:b5:66:1f:
7b:2d:88:c5:24:75:54:a0:78:e4:c8:4d:0b:eb:66:
73:51:f0:9a:07:d2:2f:ad:5e:40:35:c2:49:d1:70:
ff:f2:31:48:2b:a8:1a:3e:ec:c5:cf:39:bc:76:cf:
a9:00:65:b8:bb:40:ec:86:08:02:01:de:3b:6a:d9:
9b:a9:89:47:4e:92:fa:a6:8d:d6:19:a8:e1:54:95:
a7:ec:7c:6d:79:de:a1:38:e6:d1:ee:e9:8a:b0:21:
2e:26:d9:37:38:91:d1:65:9f:8d:1e:4a:62:cc:c8:
c5:a9:dd:40:05:33:14:20:05:c4:91:5b:85:a3:ed:
f4:7a:dd:4e:7e:c1:fa:a5:fa:8c:8e:7b:e5:2c:3a:
a3:d6:06:b8:b0:bf:8e:f4:86:ae:be:1d:fa:ae:33:
e6:e9:da:28:00:54:53:e1:77:65:85:29:d3:e1:f7:
cd:ee:68:cf:fa:c0:2a:ea:87:95:6d:b9:86:c9:e7:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.2.0/23
Signature Algorithm: sha256WithRSAEncryption
67:f8:9b:bb:96:40:d6:93:a0:c0:dc:3a:fa:e3:da:25:1a:df:
16:78:3c:ea:75:ef:84:90:26:e4:ea:5a:c2:3d:2f:79:97:ef:
1e:2c:e7:8b:d1:a0:42:42:e5:36:bd:0a:cc:21:ac:03:61:5b:
d4:e9:e0:47:4b:06:37:e6:5a:a2:60:92:53:e7:ad:86:7e:de:
1a:12:43:6b:03:f4:3e:8d:7c:8f:e3:10:6f:b7:22:89:82:04:
00:a4:a9:fc:4e:b6:33:03:ed:e6:98:70:1d:e7:ef:8c:69:55:
b8:5c:ad:12:e8:49:0c:02:59:f9:ad:13:9d:8d:97:94:20:9b:
51:04:9c:55:ec:dd:8e:a5:7e:0b:fa:4e:bb:bf:3a:42:23:7c:
6b:eb:f3:f9:28:d9:fc:97:6a:b6:20:d0:13:b4:78:96:9a:e9:
96:fd:f7:a4:ee:46:5b:eb:70:57:f9:a8:a4:91:2d:5e:93:e3:
81:5f:f9:cd:56:9c:77:a8:28:f8:61:a1:6a:42:e8:b5:ab:16:
25:34:bf:b5:18:ea:c9:cf:60:8f:d9:8e:03:1d:28:70:79:27:
1a:7f:5f:2e:c9:57:aa:12:8d:e4:fe:18:f9:23:cc:60:ef:a4:
ac:04:2b:d9:1a:2f:6e:15:09:04:58:c0:ed:3a:bb:1b:6a:d0:
b4:b5:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:22:25 2026 by rpki-client