Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer (raw, json)
Hash identifier: qxdIgJMDUrsWambqJ4PayeA/la7Gw6cT34uDMazlYVA=
Subject key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 84AB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Nov 2026 13:28:07 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 192.173.16.0 -- 192.173.24.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33963 (0x84ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 4 13:28:07 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:38:8d:20:d7:29:34:14:de:88:f9:69:d1:
ac:2f:f0:0b:2c:62:57:c0:35:b8:de:be:0c:e0:92:
c3:4e:9f:f9:5c:24:1b:bd:aa:3c:46:3a:49:59:02:
25:d1:4e:60:d6:09:d2:f9:4e:18:fd:9e:77:06:d2:
c7:b1:fe:33:c9:06:85:88:bc:92:ae:23:ef:3c:2a:
37:7b:2c:a9:50:af:b0:22:95:e9:7f:f5:ce:cf:ce:
c5:88:5c:2b:40:9f:04:1c:0d:d1:68:64:e1:bb:b2:
fc:2b:45:89:c6:33:49:cb:49:1b:44:56:07:da:00:
ec:b9:28:09:a8:61:4f:67:ad:5c:99:bc:3c:8d:a5:
b3:23:0d:44:33:6d:ae:fc:f7:15:98:a2:30:04:9a:
02:2c:c9:8c:15:4c:db:7c:9d:f1:06:31:ee:a6:ca:
88:bf:48:e1:65:eb:50:c3:f5:0f:63:4b:12:ae:5e:
09:8c:ee:ce:8c:c2:31:99:1f:71:a7:ce:c6:56:81:
d3:ca:f1:58:f1:86:fe:8b:74:9f:f9:f6:1e:bc:4a:
e7:67:40:61:77:c8:70:fb:5e:07:ba:a1:cf:66:2e:
51:2f:28:58:64:4e:c3:ef:52:19:b5:9c:d6:55:31:
2d:44:c4:66:81:f1:2a:30:8a:54:98:95:ae:5c:32:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.173.16.0-192.173.24.255
Signature Algorithm: sha256WithRSAEncryption
b4:7f:76:4c:74:88:7f:e9:c6:26:2f:e3:c6:ba:42:6d:33:c8:
bf:3d:35:41:97:d1:2f:a4:33:ab:36:6f:f4:48:1d:8a:de:4f:
70:6b:3d:81:59:11:69:6b:5b:80:88:53:c9:97:a1:55:b8:cf:
4c:c3:48:7c:af:88:4f:bc:6c:e1:eb:ab:e6:d3:7a:27:46:06:
cb:53:bb:0f:59:37:ea:96:d2:f9:e3:25:a1:76:81:ef:df:bf:
62:58:af:c0:35:73:b3:98:54:76:97:36:7a:d7:5f:0a:65:8c:
4d:69:86:c7:ea:95:90:e7:b3:64:e1:b0:81:ef:9d:1b:4e:4c:
ca:d1:cf:9b:49:a6:59:7c:a5:6c:44:04:7c:0a:68:02:07:fc:
94:fd:f4:59:8c:d1:7d:88:48:37:74:98:5c:d6:15:44:f1:20:
29:4a:cc:88:67:9a:bd:bd:1d:06:f3:1f:fe:a5:a6:10:77:67:
ec:47:6e:04:48:56:16:3a:1a:8b:3f:3a:95:2e:2a:75:d0:33:
a9:af:1d:fa:0a:a7:48:7e:cf:0d:f8:f2:09:1b:c9:9c:b3:aa:
40:2f:7b:d6:f3:90:b2:be:4a:2e:46:ec:cf:2f:a9:10:2e:aa:
83:5d:af:67:01:c2:f0:ef:31:a6:f0:0c:5e:bd:10:cc:27:14:
84:65:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:14:05 2026 by rpki-client