Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer
File: BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer (raw, json)
Hash identifier: kE4fiUtOGaai5KFAgMCuJvbKlyapbTaui2dY5JvPbsk=
Subject key identifier: 05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F81
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 13:59:32 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 166.64.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32641 (0x7f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 28 13:59:32 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91799DA, serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:31:bf:16:21:30:60:cb:96:65:3a:1f:c7:
33:74:ff:7c:d0:7e:b4:25:71:62:37:21:eb:3a:23:
10:37:d6:c1:7a:fb:57:fd:53:eb:44:ce:91:a7:24:
a0:89:13:b2:94:5f:a0:29:26:6c:76:b3:fc:cc:37:
15:8c:d6:71:d4:03:31:7b:bf:e4:d1:2d:23:5e:90:
8e:bb:d2:01:e7:66:1f:a8:bb:9e:be:be:32:70:b0:
ef:b7:8b:05:c6:ab:b2:d2:7b:38:d7:a5:33:dc:ff:
9b:c6:af:28:1d:6e:df:50:dd:e6:72:8b:4d:a5:48:
ad:fc:15:8f:48:ee:f9:6f:c0:03:d9:b6:c0:04:2b:
ca:4e:95:e6:d3:b6:0e:b4:eb:35:97:04:81:1e:3a:
17:05:8f:bf:d6:c7:95:0f:91:0f:3f:cc:e6:44:32:
b5:7b:53:2c:5b:ef:d5:b7:77:e3:fd:e3:01:da:73:
30:9e:ef:26:06:a6:5f:ae:d6:e9:b7:ba:6a:47:a0:
5f:f2:e0:20:02:30:c5:51:46:52:f2:07:ab:31:7e:
f6:83:f3:2b:f0:af:d3:58:54:2e:89:58:07:82:c1:
4c:51:f4:8d:67:b0:2a:d7:95:12:db:59:ae:be:47:
bd:38:c6:e8:cf:25:09:2e:91:c6:28:f1:d6:5d:44:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:08:92:5d:d4:4c:a0:d7:2a:91:83:21:96:99:41:19:19:50:
8a:60:39:3a:52:f0:3c:85:c7:3b:8d:08:bb:bb:ad:eb:31:94:
a6:8c:67:71:a3:53:ff:18:32:ae:dc:56:41:af:02:3a:01:d1:
8a:a0:28:ee:9d:fd:db:df:e4:a5:a2:b0:e2:c5:ec:a6:68:90:
23:61:a1:11:11:bb:b2:3c:17:c8:a4:63:7b:fd:2c:59:04:fd:
4d:a2:e3:6d:34:61:9b:1f:ec:3b:a3:a8:12:af:23:bc:a4:32:
90:d0:4c:9f:56:a6:97:c8:cb:da:25:23:0b:e8:4d:9b:eb:b7:
c9:cb:91:89:7c:3c:00:17:cd:0d:2b:03:24:d4:ae:d6:1d:9b:
94:70:59:4a:a6:2d:2e:63:36:6d:05:95:7a:fe:10:e7:e5:c8:
64:be:6f:56:db:2b:dc:3c:e2:4a:d6:0c:a2:32:f5:95:83:1d:
71:1d:f7:b6:f0:ff:05:31:cf:0a:11:26:f1:fc:2a:f5:80:0c:
15:47:da:e7:fc:ad:7f:b9:ab:19:1f:38:8b:a4:53:8f:b7:35:
a5:bc:52:2f:11:d7:e3:8c:1e:b7:35:20:63:b1:69:52:60:04:
8f:f9:77:59:67:00:ba:ba:d0:48:ec:01:13:09:2e:6f:27:df:
4d:85:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:35:27 2026 by rpki-client