Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
File: EW8KKmpLkkLXeiULcXAIFdKY3bk.cer (raw, json)
Hash identifier: dkuE+KHKsa4qCbgRYQQbIAYH/cjY0fr7MWJIttoJWHI=
Subject key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8224
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Sep 2026 13:11:47 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.25.173.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33316 (0x8224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 10 13:11:47 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:fa:ab:f6:80:f2:e0:bf:1f:37:e0:93:92:
ab:2a:83:49:ef:24:26:e8:84:c0:37:b6:c5:e0:eb:
e4:fd:6f:79:1d:6f:ae:94:97:06:e9:69:16:fe:a2:
f7:9d:f2:34:c4:6a:3f:2f:de:47:19:79:0e:ab:a3:
7b:d9:af:09:cc:96:f4:c4:20:05:2d:4a:2c:58:9d:
f7:73:f2:d8:27:4a:31:e2:fa:6b:00:98:a2:51:08:
d3:6a:5f:fa:8c:43:67:d9:ef:78:57:d8:2e:60:e8:
17:33:6f:9f:a6:b0:ab:12:c8:91:08:93:75:2a:aa:
66:7c:76:b4:e9:d6:d3:93:69:93:29:1c:14:c9:9c:
5d:ab:d6:d4:93:41:ba:92:b3:79:6c:cb:56:1e:57:
7a:87:ec:95:c6:0a:88:93:d2:94:50:36:89:31:a7:
b4:d0:24:53:9a:fb:16:e7:e3:3d:2b:96:77:af:07:
88:ad:8e:33:88:5e:12:d6:86:59:b2:fb:eb:72:77:
fd:58:59:94:3d:bd:2d:f5:eb:35:46:67:d0:87:7e:
18:6f:0c:7d:59:9d:19:49:5f:9f:60:7a:a1:bd:d7:
76:f6:b2:18:90:7a:8b:81:0a:ab:b0:f3:6f:be:6b:
84:ec:78:2e:e5:32:9e:8e:f0:58:e5:1f:fb:ba:89:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f8:20:7e:e4:34:ac:db:ad:72:ab:b4:35:7b:75:bf:8a:01:
78:f1:41:49:b5:c9:e1:bb:1d:15:2d:8d:d3:f5:4d:93:1d:0e:
2f:c2:c7:ab:58:ea:51:08:58:83:30:9a:85:4c:78:05:eb:57:
d7:ba:3d:42:79:fa:66:c3:24:1f:5e:d9:e6:71:44:0c:f0:c9:
09:56:ff:8a:d5:f9:b6:6e:bf:58:d8:ba:77:6a:df:a5:fa:0b:
75:08:72:c7:e2:a0:82:a9:52:fe:35:1e:e1:0b:75:49:d0:42:
2b:28:3e:c9:d0:9a:8f:ec:0c:98:83:58:36:99:2f:e2:89:d1:
4b:b4:bc:49:4d:1b:ae:9e:0a:7d:ac:b2:95:76:df:28:e5:41:
d8:88:f5:2d:c6:0b:dd:44:85:98:72:bf:8a:0f:54:32:59:aa:
a4:61:a9:c6:d5:42:8f:16:70:8f:46:46:43:d8:ba:31:25:ad:
59:c6:01:8e:25:1d:06:af:31:89:10:45:c1:4d:68:3b:7b:a8:
84:9c:8b:ee:55:d0:f4:6b:6d:97:70:63:57:d0:62:5c:50:2e:
e0:58:90:8b:31:b7:93:e4:c2:93:ee:66:a7:63:4d:f4:a6:dd:
b1:85:1e:2d:ed:6e:39:a0:ee:f6:eb:7c:48:f5:0f:b5:6b:3e:
af:4f:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:30 2026 by rpki-client