Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.cer (raw, json)
Hash identifier: /Nw/+qrDNFD+kFkx3Dlg9ZEEKA867cBqN92MqhW7ZlI=
Subject key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 826E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Sep 2026 13:10:52 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.37.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33390 (0x826e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 18 13:10:52 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:d1:c5:ad:6d:43:a5:9b:35:a8:97:f9:e3:
13:0d:b5:62:2c:12:18:79:17:2f:01:36:65:72:64:
da:27:1f:25:97:e1:19:a2:66:98:f2:ed:45:ff:e8:
09:83:58:30:b6:45:33:49:c7:4a:96:be:db:be:dc:
76:18:e1:ff:4c:71:67:56:8f:87:19:69:81:6f:b9:
97:3b:c0:25:d6:7c:e1:88:df:1a:ba:0b:f7:c6:fe:
10:14:17:84:1d:14:6e:18:d5:55:6b:de:2b:92:64:
36:57:5f:27:c0:98:9b:1f:59:b8:80:6e:8f:1d:87:
66:85:c7:74:a5:9d:ff:2d:b0:71:c6:13:0b:0b:2b:
5b:b0:87:89:1e:00:3a:99:97:cf:80:d3:84:7d:78:
bc:0f:bd:7f:29:e8:7c:25:3d:26:bd:04:1c:8e:92:
64:c4:29:6f:91:8f:06:b3:e0:cd:68:ff:25:96:80:
a5:b0:a3:46:d4:bf:73:c6:0b:dd:d8:0a:e1:b6:00:
1f:af:a2:80:e1:18:24:d9:7c:aa:1c:e9:ae:ef:3d:
cb:3b:fd:6b:f3:70:e2:94:bb:6b:d5:72:55:a4:aa:
c6:e1:dc:f5:a3:dd:86:d9:94:f6:78:90:08:26:7a:
d1:1e:50:4d:26:70:6c:0b:f5:d7:4f:e1:21:5c:75:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d9:d3:c7:6d:59:6e:94:2d:15:73:3d:0a:5d:cb:78:65:9d:
41:4b:6c:a1:b8:54:65:ae:cd:0d:cd:c0:af:3f:90:47:69:55:
4b:3a:f8:54:5f:24:45:67:0f:cc:da:32:62:81:53:3b:28:88:
db:1f:14:a2:99:f0:84:be:55:7f:33:e0:0b:4a:14:7a:66:3d:
99:17:30:03:3f:36:dc:61:38:3e:6b:8f:a7:60:13:4c:22:47:
18:58:69:4f:48:11:80:a1:28:84:c3:5d:4b:c2:61:aa:0c:1b:
29:d0:e7:81:7b:1b:50:3e:ee:bb:ec:a1:b3:6d:14:2f:7c:af:
0d:3d:3b:31:90:7d:0e:28:56:e4:70:6e:6d:fe:d0:f9:d8:1e:
21:a0:98:51:03:e8:a2:9e:98:a6:09:ae:f1:d7:99:14:9e:4b:
e0:27:0d:c5:aa:e4:84:ec:f4:da:0b:08:99:e8:6d:9c:17:e5:
99:5e:93:f3:1a:56:f8:10:58:ce:b3:df:66:2c:03:b8:bd:32:
af:ff:fe:c8:55:8c:b8:bd:64:c9:f2:f7:7e:79:33:f2:6b:4b:
dd:74:a1:f2:d6:5e:99:36:20:bb:fd:d1:6f:91:3c:e2:d3:5d:
9b:61:0d:4c:12:33:96:6e:e9:ff:94:42:e2:a3:86:02:d6:5a:
59:b9:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:23:57 2026 by rpki-client