Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
File: D7ep-f-5NrdU2MC2yClQpAHeosc.cer (raw, json)
Hash identifier: rbqoP95a8UQ4c5flJscv9Ctl1iUbAy+6zC+ldvSIHUA=
Subject key identifier: 0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Jul 2026 05:31:30 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 160.236.164.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 13:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32613 (0x7f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 27 05:31:30 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9168E98, serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:56:03:99:07:fe:45:54:28:4c:b3:4e:a6:
aa:fc:6c:0d:d9:76:49:03:bb:e7:8d:be:22:aa:42:
77:b2:c6:d6:30:c1:da:93:bf:eb:59:b8:81:74:1a:
c3:f6:16:84:58:a7:73:39:e4:f8:21:63:f9:97:b2:
e3:de:05:07:63:ea:2e:20:eb:46:a8:7e:03:96:a8:
5c:e8:6a:1f:ae:d6:aa:ad:e6:c1:81:da:f2:4a:aa:
b1:e7:0b:3e:10:57:c4:b5:81:8f:b0:3c:7d:8c:6a:
f6:14:e4:cd:d8:42:8a:02:a3:12:d7:9c:89:5f:58:
75:2e:5d:f8:15:19:b2:19:3d:9d:00:fb:71:58:90:
2d:cf:a3:8e:e9:69:c7:cc:dc:f6:0b:5c:ec:8f:cb:
fb:95:86:3a:67:38:99:d6:ba:20:ec:b9:74:11:5f:
55:21:84:d1:7f:3b:66:fb:a4:a1:55:7f:b2:95:8b:
a5:71:88:a9:a6:4d:d8:d4:be:0e:87:2b:18:6f:36:
dd:07:65:aa:ac:1c:54:bd:c4:e9:a1:ba:fe:ac:31:
b9:1d:35:7a:36:d8:e6:c7:03:d8:37:ff:c0:f2:00:
a1:7c:aa:27:c9:59:60:2f:7e:30:6e:ff:86:6e:41:
73:41:a2:b1:48:10:40:89:f6:87:9c:ea:b3:18:1e:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:10:c0:c1:08:33:ce:9b:39:db:88:95:7c:e0:68:cf:0b:9c:
ea:63:44:1a:15:a6:33:65:5f:32:71:fa:da:7d:96:8a:45:8f:
a0:e3:98:89:2d:57:79:84:4c:cc:0c:b8:3e:ba:68:7a:2a:cb:
a7:d1:60:b9:51:e9:30:86:1c:f6:36:27:1b:e0:36:09:82:bc:
b3:52:0c:0f:2e:0f:19:38:8b:8c:0c:9c:01:98:d3:11:ba:73:
98:05:05:fc:ad:08:bc:da:a9:18:43:12:35:94:26:45:ad:8a:
59:ab:ba:cc:a7:17:90:74:6c:32:13:fd:a1:17:31:e0:c4:5b:
a5:c6:c0:48:da:69:8b:f7:01:a8:8a:ff:61:4b:4d:7e:05:61:
08:27:ca:55:6e:f3:e2:47:ac:4a:ae:4e:b5:6a:4a:69:83:30:
db:8b:ca:66:8a:fc:42:f3:33:b4:b3:1b:e6:c1:cb:3a:51:36:
cd:d5:2c:52:cb:ba:15:38:63:4d:bd:fa:43:c1:2c:d1:ad:8e:
7b:53:e5:98:eb:d8:b1:91:90:c7:cf:df:78:2b:7a:5a:4b:0c:
a6:84:ee:ca:6f:85:f0:80:14:47:d4:1e:e8:c8:cb:6a:73:1c:
3f:eb:ac:d6:35:31:f4:21:7c:ad:3f:9e:ba:79:c4:83:82:af:
61:4f:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:57 2026 by rpki-client