Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer
File: DHT8APVkd7MNxjxYlDlCKryGiIM.cer (raw, json)
Hash identifier: 5n8k/5vQqHRclKTyNsvRr5q/KEaez4gO5I3eig/EEU4=
Subject key identifier: 0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8260
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Sep 2026 01:08:41 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 144.55.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33376 (0x8260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 17 01:08:41 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91D2DDF, serialNumber=0C74FC00F56477B30DC63C589439422ABC868883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:8a:6e:be:fb:6c:2d:7e:cb:0e:fb:ee:9c:
91:42:37:ac:6b:1d:ab:58:81:28:33:e5:63:78:8a:
0f:fe:4d:cb:b4:5d:71:c4:1a:14:04:c7:40:3f:e6:
5d:2c:7d:c1:90:c2:73:85:7b:f4:1f:43:d3:88:2b:
29:62:6a:54:8f:5e:f3:b9:80:9d:d2:db:02:0d:03:
eb:37:35:9d:a0:98:98:82:52:dc:b7:a9:78:f5:3f:
70:a2:be:57:ae:13:a4:8b:56:99:f3:4e:10:c3:14:
f1:b8:2a:7c:8e:03:d2:7d:ad:1f:a3:be:b5:8a:73:
3d:b0:ab:1b:94:1f:4b:97:4a:c2:75:ba:12:02:ce:
1b:a3:5f:1a:51:d9:be:f6:43:a6:24:b5:3b:71:e4:
e6:ed:25:68:c3:dd:e5:b5:cd:ad:b1:81:dd:6c:53:
49:4d:37:b5:0f:cf:d4:35:5a:fb:e4:28:26:ae:e5:
61:1c:32:b7:43:02:5f:a4:c1:09:ee:5f:1c:cc:6f:
a8:c6:fe:84:da:5b:66:58:e5:5c:c9:16:94:a0:15:
52:ea:99:df:c6:d8:9e:c7:84:e9:e8:9a:23:91:e7:
4e:e6:f9:db:90:ad:9d:ab:1f:9d:1b:cf:2e:29:35:
ac:7c:6b:33:4e:0a:26:10:75:ec:53:da:3b:4d:01:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.55.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:66:70:2b:db:64:48:09:61:d5:7c:00:92:95:a0:8c:b0:8b:
b9:b0:ee:c5:78:c9:47:09:5e:64:a4:13:65:92:05:ce:5b:3e:
4a:e6:a7:66:48:2d:55:a6:5d:6a:96:76:16:66:0c:1a:c5:cc:
10:59:62:22:4d:39:43:b1:77:9c:9e:34:91:fc:82:01:ff:a9:
b2:57:81:99:cb:b4:55:29:73:a7:e0:77:ee:cb:08:38:d7:f4:
52:4c:0c:08:3c:24:b5:13:f7:90:99:9a:ac:bd:08:89:a6:4b:
38:02:e4:6a:43:11:98:7c:df:59:a1:59:f1:99:42:ad:6a:8a:
f2:67:95:be:e9:77:66:3f:61:44:e7:99:c6:38:ec:18:a2:b4:
a6:74:05:84:e9:57:ff:bb:57:51:79:c3:c6:cc:86:ea:4d:e4:
87:ef:2b:30:60:59:19:32:4a:75:b1:cd:5e:c0:73:c5:6d:ca:
ba:c6:77:de:2a:c3:1f:40:85:74:56:58:44:a2:41:34:ef:71:
b9:47:aa:cf:fc:51:e5:8f:13:a1:3a:74:2c:70:76:af:bf:c9:
e8:88:1f:c0:e7:f5:93:40:06:51:5b:88:8d:da:a1:e1:2e:1c:
ba:5d:f8:0a:c8:2f:62:3e:45:ee:7c:a8:ed:70:a3:8b:67:4e:
26:94:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:36:59 2026 by rpki-client