Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer (raw, json)
Hash identifier: zNOf/XpbRSXi/eMaQaGSIqOjjOFe16WLN+VxbB6rh6Y=
Subject key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7F87
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 14:21:06 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 165.99.90.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32647 (0x7f87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 28 14:21:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:9b:9d:39:9f:6d:ae:44:42:5d:b5:10:5a:
27:79:91:de:6a:fb:89:cd:57:16:02:a1:e9:29:9a:
57:41:e3:62:83:cf:c6:b3:1d:c3:9e:4d:1f:72:9c:
eb:9d:3f:2a:dd:33:11:f9:0d:4b:ee:e2:c8:aa:b9:
d8:d2:5a:56:f8:f1:0d:e1:8c:5d:21:79:c4:b2:35:
ca:70:24:0d:7a:ec:29:1e:4f:1b:48:b9:39:3c:a5:
c6:3b:09:86:21:74:9b:de:e3:51:1e:30:c7:82:21:
d7:fc:e5:3f:41:db:33:f4:c6:8e:27:03:7b:59:5e:
86:f8:d1:fe:fa:3b:3f:35:93:7a:f8:d9:ec:9f:29:
4f:ad:b1:dc:96:cc:0e:16:b7:af:85:4f:75:27:bf:
4a:dc:63:de:ba:0b:5c:79:87:8d:3b:d5:35:a0:c6:
8f:e4:8f:5e:3f:42:12:5f:97:73:e2:5e:a8:8e:07:
b0:00:3b:f0:76:77:6d:94:15:3f:fe:d5:f6:da:a1:
e0:7c:02:96:f1:79:19:96:a3:f9:b7:bb:d2:a1:89:
42:ce:ad:90:db:f5:2f:34:3a:93:a4:19:cc:f7:4f:
63:8b:17:9f:d7:77:a9:ed:9b:cd:4b:16:8c:72:57:
4d:16:3d:fb:51:ee:17:ed:77:a0:e4:d5:e3:40:48:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.90.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:67:e6:28:00:6c:4c:7c:34:a3:ef:26:06:98:e9:00:90:17:
e7:05:80:63:60:66:5f:ca:24:16:72:fd:91:b6:73:7d:34:ed:
65:a2:51:1a:91:58:65:c4:fb:95:f0:1e:0c:22:3a:a9:4a:3c:
cd:07:4f:c4:94:00:53:59:b9:b2:37:5e:01:f3:d1:ea:e8:31:
6c:57:e9:91:93:99:26:61:0d:22:74:fd:7d:03:e8:e6:d2:75:
1b:c2:94:74:34:a0:52:33:58:f6:b3:2d:6d:52:a0:95:2a:f4:
97:15:0f:af:26:83:60:6b:85:57:51:75:3e:5f:23:4e:a9:7e:
cf:ee:59:78:30:b8:be:13:5d:19:ad:08:e1:b9:e8:98:f8:22:
f2:d2:88:f7:a5:c9:31:4d:5b:71:a9:2c:3c:b5:25:01:01:95:
ca:a4:db:5b:08:dd:0a:93:28:73:ee:f2:76:ae:a8:76:07:66:
a3:9b:9d:b6:ec:6f:d7:de:59:15:47:71:27:ad:57:98:01:de:
c4:5e:d5:a6:68:3f:c6:16:ed:06:d9:46:3b:0b:2e:b1:83:59:
9d:8d:eb:bc:1d:0e:61:af:46:2e:75:68:35:01:1e:c2:20:a4:
4e:7e:76:30:af:9f:94:a9:85:3c:6a:93:4a:7f:4c:c6:76:92:
75:a0:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:20 2026 by rpki-client