
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
File: DsmozWa374HQeaCEKyY5Zf50-NA.cer (raw, json)
Hash identifier: SYPsU1BVzI2jkQh752DUnxdr6VW7i+6E03RtpTl0pz4=
Subject key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80C8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 12:59:44 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 167.30.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32968 (0x80c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 16 12:59:44 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:d5:b8:be:f9:0d:be:2f:14:3a:ef:c0:56:
12:8c:11:cf:c6:fb:4c:9e:47:66:22:ff:56:24:ef:
a6:d1:57:b2:66:00:76:5f:61:8a:29:0d:72:64:47:
85:ca:54:61:0f:94:37:ec:66:c0:54:31:e8:cc:fe:
58:43:76:25:9a:a4:72:16:9c:5b:a3:19:1e:8b:d8:
1a:6a:8e:af:37:06:cb:6f:8c:b6:cc:b8:03:7f:0d:
34:60:9e:b7:f7:4b:3c:f7:09:96:63:75:3d:df:da:
59:de:9a:1a:d4:3b:5c:6a:9a:e8:b2:f9:5a:3b:3a:
2a:89:99:d4:dc:81:1c:5b:10:9c:15:ac:e0:b6:e2:
85:ee:17:fe:fa:f1:a7:1f:47:3d:13:7b:43:c5:39:
f4:7e:78:68:4c:5a:e9:b0:69:63:0b:5a:3b:dd:36:
65:77:4c:c7:01:ed:2c:01:aa:dc:ef:26:ad:eb:0d:
bb:3b:6b:0e:9c:db:ca:1d:08:ce:d8:99:83:04:d3:
fe:84:88:75:2e:d2:c7:be:1d:b5:fa:31:58:78:8f:
9a:7b:e8:15:e9:0f:1f:f3:f1:40:56:95:81:bf:82:
22:65:25:de:0e:29:d0:2d:25:7a:a4:10:65:30:cf:
62:34:cc:78:61:ad:fa:6b:e9:20:10:10:df:00:fa:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:3f:88:f1:a3:ba:88:cb:62:d9:ab:ac:cd:ed:fa:37:9f:ed:
e8:f3:7a:74:4e:1c:2f:d5:f1:68:f0:82:02:b8:db:b8:e5:aa:
f7:a9:3c:03:bf:42:8d:89:83:10:db:6d:76:ee:ea:ae:dd:51:
d5:b9:42:cf:29:93:75:90:9f:36:08:8b:82:35:77:03:58:d6:
0e:8d:38:b4:7f:94:62:d1:f0:f8:87:63:00:40:59:77:aa:8b:
a4:25:25:fa:6c:92:31:48:4e:a8:38:27:6c:94:3a:aa:71:18:
27:6d:ec:78:c7:b3:0d:25:34:2b:eb:6c:35:b2:1c:7d:3e:c6:
01:e1:3c:c7:e1:18:99:6f:02:49:02:69:7a:90:b8:8c:0a:31:
19:06:ca:05:ec:5e:8d:84:83:b7:11:2f:d4:5f:cb:a2:1a:bb:
75:bd:db:98:28:df:60:76:17:1c:1d:c1:26:35:23:77:13:4a:
8b:7a:fd:5c:69:0d:00:00:42:6c:95:12:c8:47:52:b8:4e:3b:
ad:38:6b:28:f9:aa:85:a6:1e:a1:db:f7:c8:17:ef:32:cb:55:
52:e0:a3:5f:d4:f6:a0:0c:4a:1a:0a:bc:de:66:50:f4:50:f4:
f3:0e:08:33:b9:de:3e:8a:81:f3:23:06:d6:f4:c1:36:99:7a:
4a:7d:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:02:36 2026 by rpki-client