Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
File: XtX3khrIZUHZKTb2kcsc2_bVwqE.cer (raw, json)
Hash identifier: yS/qwiMPfO1S1GbPRwcSwjG3ph87LQ3HMMT70AtEj6c=
Subject key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7599
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:09 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 192.64.203.0 -- 192.64.204.255
IP: 198.179.225.0/24
IP: 205.147.104.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30105 (0x7599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:48:e9:5f:7d:e8:21:37:2b:f1:93:06:f3:
d3:e6:d3:f3:73:72:af:97:5a:9a:26:ed:06:eb:70:
b1:55:f4:c6:ac:0c:47:33:90:7e:5c:e9:41:2b:2a:
93:0d:ca:8c:75:79:d1:81:ec:f9:a4:47:05:7f:11:
b1:4a:4e:07:63:8f:43:42:29:e3:a7:10:09:84:72:
6b:e2:33:35:d3:1f:a3:a7:47:a8:09:ae:b2:2b:d2:
dd:a9:eb:81:b6:81:c1:4f:e6:5c:2f:f7:cf:eb:f0:
3e:49:85:18:0a:26:ab:72:64:da:f3:17:40:3a:93:
40:22:f8:1c:65:e1:af:d7:cd:b4:2c:ef:7d:cf:a0:
1f:ae:a1:3c:47:15:c8:29:be:ef:d2:54:f7:63:cf:
e4:8c:a5:d5:17:17:d1:fe:b4:8c:b2:c1:c7:56:e3:
7f:a7:f0:1a:fe:93:aa:08:e9:00:69:ea:03:6c:59:
a2:5f:e7:a7:fd:83:5c:a1:c6:7d:02:65:4c:c5:e9:
95:e0:c4:b6:d0:fe:61:71:72:19:89:6b:a6:a0:00:
79:b7:71:f5:cc:10:8d:dc:8f:a1:5b:c1:e4:fa:40:
2c:ab:62:17:24:45:8c:45:96:97:57:17:ed:98:fe:
c4:1a:ec:00:b0:77:3f:16:c6:d4:3b:5c:e4:43:24:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.64.203.0-192.64.204.255
198.179.225.0/24
205.147.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:39:1b:5f:84:3f:55:24:12:07:92:b2:6d:36:b6:6c:77:f5:
2d:b5:00:28:e5:c1:34:c9:8c:4b:76:ea:3a:a6:91:67:8e:fb:
b8:62:15:04:b6:75:f1:eb:b9:87:24:d5:97:8f:9d:50:80:8f:
05:33:21:9b:c8:36:d4:ab:f0:6e:a9:ff:de:bb:42:8b:b5:65:
e8:c0:fb:19:1f:dd:58:67:86:4c:8d:9e:42:94:62:49:1c:14:
62:fb:ef:f2:d5:5c:e8:74:ca:24:19:e4:6d:24:9f:20:b2:b0:
23:b1:80:73:50:52:09:af:32:d9:70:83:1c:fb:9c:3e:7f:f9:
ee:de:18:d6:53:86:d1:23:9b:d3:c1:e6:fc:9e:ec:2e:95:38:
04:87:0a:c7:a6:b6:39:e1:40:91:98:9b:b2:28:72:84:b4:5b:
b4:5a:5d:d0:9e:af:95:f1:d4:77:08:9a:55:df:e7:2a:13:d9:
86:0c:33:68:fe:f4:34:1c:09:88:90:29:86:c8:3e:a2:fb:47:
b0:60:b4:e8:fa:8e:d8:bb:a3:6c:84:53:8e:dd:d5:be:e8:76:
d5:08:43:fa:d9:55:df:6b:84:63:36:f5:8d:c3:e7:67:e8:43:
53:92:ab:4a:b6:a4:0c:64:74:43:ae:82:3a:df:97:db:ed:b5:
ca:fc:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:13 2026 by rpki-client