Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer (raw, json)
Hash identifier: a+otAp6A8MhUaaSc1taQasIouTFCJ4xoup29R87d1Ts=
Subject key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C56
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jun 2026 13:58:29 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 168.70.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31830 (0x7c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 3 13:58:29 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:43:af:54:39:e4:a9:e5:a4:64:03:ee:4c:
c2:d5:09:6a:23:3f:83:97:7a:31:4e:d9:49:01:bb:
bd:c7:22:a7:b0:02:e2:22:55:97:d1:96:5a:11:4c:
34:d3:4a:0c:4f:3b:7d:81:7c:57:2b:3c:c6:39:8d:
f2:0e:74:3f:b4:6c:53:70:83:02:b6:9d:63:a3:05:
54:75:82:09:33:6c:d5:ac:bf:8d:f8:b8:40:10:44:
d0:5c:c4:16:7c:bc:12:1f:9c:08:06:32:a7:00:09:
40:47:de:80:a8:37:26:29:dc:8c:d3:09:61:87:e4:
67:82:cb:6d:67:ee:e9:49:df:30:8d:2b:ee:e3:21:
e7:67:fb:ce:39:56:75:71:aa:af:fd:9c:8b:58:6c:
20:4f:1f:c7:ee:77:a6:93:68:22:56:ea:bf:8e:4b:
ae:ee:f3:27:31:fe:a8:d5:80:68:6a:a1:4a:66:a0:
26:2b:89:8c:a3:cd:b9:28:b6:47:8c:ff:55:25:f4:
2f:57:bc:da:59:55:2b:a9:aa:0e:f9:9d:68:d7:99:
e4:ef:ed:49:fd:55:10:d5:79:03:2e:7c:fb:0e:df:
cf:f8:84:08:11:cd:d1:09:14:2e:56:85:d3:67:cf:
62:b4:c5:60:29:57:f8:da:ab:6c:1a:84:31:d4:96:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:12:8a:81:06:41:67:35:bd:e4:ee:2c:88:f8:18:f0:9a:10:
ff:26:8c:17:1f:37:8a:7f:8f:b5:79:d2:63:66:0c:4c:88:c2:
de:37:76:0f:6b:d5:bd:1c:39:b5:62:c2:5a:ef:36:d7:3d:96:
9d:fe:f5:68:a4:7d:42:c6:f2:af:76:d8:02:1f:6f:1f:4c:73:
8f:63:69:10:87:a4:59:62:58:3d:41:c9:af:8a:97:00:7b:f7:
e3:f6:cb:fb:26:57:2c:4a:a5:42:12:00:ad:01:eb:64:44:e8:
a8:90:28:90:5e:36:a9:4b:3c:02:36:45:33:db:01:df:84:1f:
0b:ea:f6:cb:d4:4d:d0:56:b8:c7:84:c6:a9:bd:f8:5a:38:4d:
bc:26:02:a6:29:7f:28:7f:06:44:0c:26:05:83:de:43:f1:bf:
e6:df:98:e1:12:f8:58:f2:69:86:fc:cb:d7:2f:35:48:26:4c:
0e:44:fb:49:a8:88:0b:74:66:ad:4b:fd:6c:73:a0:ff:ea:4f:
e2:f1:fa:df:07:bc:d9:26:3d:3b:2d:52:b6:0a:90:93:b9:e5:
b7:5d:2a:65:cc:2c:80:cd:e6:af:71:7f:26:68:26:e5:72:2d:
04:5c:91:d6:fa:f8:a6:5b:2d:07:6d:1f:31:56:cf:b6:10:1e:
a6:ce:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:02 2026 by rpki-client