Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
File: OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer (raw, json)
Hash identifier: G6zw1kBPqv5cFP/W87A39TmNgzO5VYdZmzISGf5kAcc=
Subject key identifier: 39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 08:11:32 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.236.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32629 (0x7f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 28 08:11:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A919A43E, serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:cd:46:00:ae:a5:0c:df:db:6b:26:9c:11:
ab:1a:b4:8a:63:5d:36:f6:00:ea:52:cf:a7:ed:39:
0e:4f:b9:0b:39:f5:74:4b:23:26:51:ca:3e:a1:62:
59:eb:f5:07:04:40:18:6d:d4:f0:9a:d0:1c:c5:e3:
06:93:17:19:c4:c2:9b:d9:50:5a:c3:d8:6a:f2:b8:
f5:d1:6d:44:77:04:40:07:52:85:84:0c:b6:35:14:
d9:b0:fa:a7:c1:d9:4d:15:8e:4f:40:cd:66:a0:34:
2d:1a:27:c0:ca:d0:89:0a:b4:e3:8b:e4:0a:ed:9a:
02:cc:dc:ff:30:01:17:51:e0:95:34:8f:e1:f2:a1:
7d:f5:d5:20:31:60:26:aa:f5:96:cb:77:7d:1b:29:
7e:ca:76:5e:d6:fd:27:65:4f:f4:2c:f4:05:0d:88:
1c:f3:bc:34:fa:c4:89:cd:79:28:f3:cb:4e:14:6a:
e6:2d:b3:6b:70:19:c5:c2:bb:b6:df:b7:ff:96:d5:
0e:b3:a5:69:74:5f:a7:df:6b:91:aa:51:5a:06:70:
75:21:bc:96:11:58:66:9f:00:77:a5:f8:46:f7:09:
03:18:2a:90:79:be:c3:a0:cd:0f:f8:26:c8:1b:9a:
38:c5:91:42:f7:e7:3a:50:1b:5f:68:10:46:4a:e4:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.236.180.0/23
Signature Algorithm: sha256WithRSAEncryption
63:5f:79:20:60:1c:9a:bf:c4:43:bd:a3:23:2d:67:3b:f7:4d:
b5:d4:ce:2c:8c:04:c9:ec:71:db:af:75:b6:c9:cf:ae:f3:81:
34:ee:e6:7e:38:a9:79:59:79:11:30:70:9d:c8:ce:b2:93:7c:
b1:87:89:13:91:46:d8:24:41:65:31:03:1f:92:30:2f:2e:49:
d1:22:49:a1:54:c6:b7:ca:2c:7b:dd:7a:50:cf:fa:da:be:88:
9b:29:cc:4e:27:fb:74:33:00:97:76:87:bc:f3:9d:bb:f8:0e:
0e:fd:7d:f2:cd:3b:d8:c5:4f:ea:de:a6:3a:04:4d:a3:37:09:
e5:b6:5b:b0:ea:46:5d:34:39:09:35:b1:4e:77:b5:b5:f7:e0:
e0:9c:04:43:6d:4a:e0:06:60:d7:7f:fa:de:bc:2f:08:fb:e1:
4f:3d:64:d6:5f:12:3e:d0:82:c1:fa:3a:1b:a2:44:cb:1e:f3:
d6:f1:1f:28:1a:58:9c:c6:c7:da:07:b9:67:02:0e:76:c0:11:
2b:04:b0:98:b4:ae:59:93:67:02:0d:9f:c7:17:7d:3f:79:9f:
74:16:9f:6e:96:81:9f:d5:0f:23:d0:06:b2:98:20:43:ae:49:
f0:51:ec:de:4d:24:d2:2c:8b:4c:f8:93:4d:c4:3a:c9:3e:d4:
1a:71:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:16 2026 by rpki-client