Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
File: O6JVjKXxoDfZaW9WeugTZ8buNeY.cer (raw, json)
Hash identifier: gwgW9KKmEpf8MPDpyeOcnC9tOt59QMb5bOHoS+4jook=
Subject key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 79DB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Apr 2026 14:13:34 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.200.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31195 (0x79db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 16 14:13:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:fb:02:0b:4b:49:da:00:84:cd:2b:52:24:
61:0e:79:3d:a9:66:0f:b2:c8:6b:9a:17:43:e2:fd:
b2:64:e6:17:13:59:9d:b3:41:36:f1:62:64:58:6f:
62:ec:fe:d3:d1:47:1c:d2:e2:5e:fc:f8:18:c4:ef:
ec:f8:2d:30:7a:32:98:e3:97:70:46:98:e6:cd:93:
02:8a:6a:44:3e:57:ec:f5:de:f7:c8:42:99:e3:ec:
e9:6c:e0:9f:b3:6c:33:97:10:1c:b8:61:84:6f:f7:
e1:cc:81:c1:86:1d:ce:21:af:b0:86:1f:33:9e:81:
3c:e2:62:2f:1b:33:6b:5d:34:8a:66:c0:fc:ee:7f:
51:81:1b:6d:c8:e7:fe:da:b1:e0:63:ab:cd:62:f1:
dd:87:18:85:4a:8c:54:d5:5a:1e:61:11:8e:5d:45:
a8:24:c9:d3:0b:da:34:87:d8:2d:35:34:83:47:84:
10:93:f5:88:e3:19:75:bc:75:0f:a0:4e:90:2a:f0:
06:fc:81:c9:2d:cf:67:60:89:a9:fa:04:76:a6:58:
97:03:04:c4:68:33:6a:d4:48:62:7f:e6:70:0f:1a:
69:67:ee:02:eb:42:7c:fa:db:5b:0d:2f:54:31:79:
51:cc:b9:12:24:5d:b6:27:a0:9e:2b:e3:69:a0:51:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.200.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:4a:cf:88:cb:8c:77:ab:9b:ad:94:af:33:97:b1:7b:39:47:
09:46:f8:19:dd:f4:b0:c9:0a:92:90:af:33:7a:f7:ed:20:16:
1d:21:3b:8a:e8:53:ad:d7:78:7f:f5:ce:ab:6d:ed:e5:78:a5:
9b:61:8d:9f:7d:17:31:63:46:2d:55:27:13:02:f1:1e:45:67:
40:70:e3:e3:bb:67:d2:86:74:2a:fa:09:c0:7c:ca:31:5e:24:
02:bd:89:af:2f:b9:25:30:a6:29:53:bf:90:61:c2:7a:97:5b:
a0:2b:64:1b:92:bd:e1:12:c3:6b:39:df:52:ef:46:5a:4f:0b:
ce:c4:96:59:aa:e7:b7:f9:34:84:c7:af:75:39:62:8a:25:cb:
3c:3d:87:d0:95:7a:87:b9:3d:bf:42:70:e6:b7:66:87:30:ab:
c6:81:7c:e1:48:57:0b:07:2e:ce:71:e6:33:db:e3:32:08:b0:
95:11:a6:65:69:89:f9:63:25:55:79:38:4e:15:81:3e:cc:03:
43:3f:fd:87:80:99:eb:3b:ab:d5:de:c7:02:d1:0e:ca:9a:d0:
00:38:0b:33:1f:da:a6:2d:b3:10:dd:aa:7a:1c:a4:32:71:80:
ec:18:71:b5:79:01:0c:52:d7:c9:72:d4:98:cd:23:5a:c9:9d:
27:9a:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:53 2026 by rpki-client