Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer
File: BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer (raw, json)
Hash identifier: 1nlH6LFVe3wdQotnewhHzXqQ5RkcMgUG3dO8naCKtvo=
Subject key identifier: 05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7CA1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 08 Jun 2026 22:28:43 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 166.64.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31905 (0x7ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 8 22:28:43 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91799DA, serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:31:bf:16:21:30:60:cb:96:65:3a:1f:c7:
33:74:ff:7c:d0:7e:b4:25:71:62:37:21:eb:3a:23:
10:37:d6:c1:7a:fb:57:fd:53:eb:44:ce:91:a7:24:
a0:89:13:b2:94:5f:a0:29:26:6c:76:b3:fc:cc:37:
15:8c:d6:71:d4:03:31:7b:bf:e4:d1:2d:23:5e:90:
8e:bb:d2:01:e7:66:1f:a8:bb:9e:be:be:32:70:b0:
ef:b7:8b:05:c6:ab:b2:d2:7b:38:d7:a5:33:dc:ff:
9b:c6:af:28:1d:6e:df:50:dd:e6:72:8b:4d:a5:48:
ad:fc:15:8f:48:ee:f9:6f:c0:03:d9:b6:c0:04:2b:
ca:4e:95:e6:d3:b6:0e:b4:eb:35:97:04:81:1e:3a:
17:05:8f:bf:d6:c7:95:0f:91:0f:3f:cc:e6:44:32:
b5:7b:53:2c:5b:ef:d5:b7:77:e3:fd:e3:01:da:73:
30:9e:ef:26:06:a6:5f:ae:d6:e9:b7:ba:6a:47:a0:
5f:f2:e0:20:02:30:c5:51:46:52:f2:07:ab:31:7e:
f6:83:f3:2b:f0:af:d3:58:54:2e:89:58:07:82:c1:
4c:51:f4:8d:67:b0:2a:d7:95:12:db:59:ae:be:47:
bd:38:c6:e8:cf:25:09:2e:91:c6:28:f1:d6:5d:44:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:dd:0f:16:ac:cf:e8:7a:03:1a:ec:54:74:3a:bb:90:a3:c8:
bb:24:7f:f3:de:e1:74:0c:cb:49:ab:af:02:b4:7c:70:dd:1c:
e7:1f:4e:c7:de:b9:5a:7b:15:fb:79:88:2d:b7:7c:d9:ad:23:
bd:ce:f6:4b:54:33:f4:f1:14:65:88:3c:99:d9:22:ad:8f:89:
0b:c4:77:36:09:7e:5b:16:16:d8:c4:cf:1b:0e:da:e8:ed:13:
cb:5d:aa:d3:ce:68:47:cd:1f:e3:8f:60:39:05:0b:e4:ea:45:
78:9b:8f:67:9c:41:fc:c5:34:e3:60:b4:c8:a4:09:62:2a:5e:
56:99:99:bb:d0:3f:7a:25:a1:4c:fe:71:ab:33:8c:e3:8a:3f:
d5:0c:0e:62:7b:a9:b6:59:13:88:c0:ce:11:8b:87:ab:34:55:
f8:4f:7c:b8:f3:96:0c:7f:c9:87:d2:66:4c:d0:16:0c:0a:45:
d4:49:bd:4d:32:d0:b7:e3:81:9c:93:40:1d:1e:e2:3d:1f:8e:
02:68:88:dd:3f:34:aa:9b:cb:c2:e0:35:af:22:46:9d:72:5d:
3a:10:b1:96:bb:66:fd:2d:74:1c:2c:9c:f0:ee:72:b6:e5:13:
e4:39:55:75:8d:0a:78:ea:23:ce:36:b5:cb:c6:45:f0:2a:c4:
ff:94:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:39:34 2026 by rpki-client