Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
File: 64P0iA8jV15XUXhcbgqyvgskm8M.cer (raw, json)
Hash identifier: ObArdrBJ5EbN3so8oeXDAJKD7AWTc/Ca9Ho3ixsj2YU=
Subject key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7692
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:07 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.44.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30354 (0x7692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:4a:0e:e3:2b:9f:4b:d5:b5:51:df:5a:29:
cb:df:ab:d2:8d:a6:f6:2b:d7:59:a1:64:ae:2c:65:
9b:fc:93:bf:c2:38:8f:06:34:7b:8b:af:0e:96:20:
68:64:18:ef:42:06:62:88:81:0a:60:b8:81:ed:ef:
ba:ef:87:cc:4e:24:f4:00:b7:f6:03:00:58:00:61:
48:35:ac:a7:b2:b8:ef:53:18:40:d0:95:4f:f8:93:
6d:47:67:2d:77:53:bc:7e:73:19:29:2f:b8:21:59:
b5:c6:20:f2:22:6b:6b:1e:40:4a:29:df:39:ab:fe:
d3:c4:ed:3f:41:15:a5:1d:f1:02:d4:2a:77:bb:5c:
99:1d:b6:85:6b:9c:dc:57:35:dd:14:a0:0d:db:e3:
bd:fd:86:d4:94:42:74:4c:d3:87:0b:71:38:07:60:
f0:8b:e4:83:42:f5:c2:c4:f0:d5:0d:78:9d:d9:5f:
cc:2c:7b:1f:62:57:92:b1:cb:cc:db:19:05:c8:89:
21:97:03:d3:77:78:0b:0f:0b:59:e4:55:dc:c2:fb:
64:65:c6:77:4e:0a:e1:51:50:8d:2a:73:eb:2a:b8:
6b:47:bb:46:84:0f:3f:0a:0f:3e:66:73:ae:a6:42:
a5:61:99:c3:d0:1f:12:6e:55:fb:4c:c8:28:85:67:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:14:45:2b:64:f7:0d:37:13:da:16:5c:2a:08:20:e2:b5:1b:
c1:e2:23:36:ba:ca:d7:78:22:65:37:38:d7:e6:a0:2b:24:ed:
6b:5b:6a:4d:c3:aa:58:5b:f0:ba:65:5b:96:7f:34:d7:96:a9:
f0:97:85:39:37:14:17:58:4e:55:9c:32:7c:c1:bb:aa:fc:57:
76:b4:89:66:c5:38:13:09:d7:b2:30:e6:1f:75:0c:b4:b1:cd:
48:c6:25:38:46:5d:32:2d:e8:82:73:62:c4:d8:9e:68:04:fa:
cc:0f:77:cf:8a:4d:4b:a8:d1:d7:8d:79:ad:e3:b1:83:d3:e1:
8b:ad:c8:46:25:9f:92:f6:72:e0:64:f2:57:35:46:40:ff:0e:
64:51:f5:d2:bd:80:e4:68:2c:b5:73:05:b9:ca:ec:1a:32:45:
6f:7e:e4:14:db:71:2b:f8:27:49:b4:09:90:31:82:d1:4d:09:
79:4b:c2:db:da:b5:fa:ce:e5:fb:3a:b5:dd:26:db:53:c9:42:
82:3e:8d:a3:af:1e:57:34:99:ca:4d:e7:e7:a3:d0:3b:b3:88:
dd:b9:13:b5:b0:d5:67:72:d7:97:69:d1:d2:0a:11:52:db:62:
9d:6c:51:ac:80:42:54:1f:b0:26:f5:5f:e9:28:98:b2:62:96:
cd:ce:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:53 2026 by rpki-client