Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
File: bJoSIRV5G44VBIAXqXV-WHq1b4A.cer (raw, json)
Hash identifier: kohDkEDTeKuXxTXXN2WFCLflgtyrVS30DrR+5rYWdTI=
Subject key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 801F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 12:55:10 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 160.22.186.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32799 (0x801f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 3 12:55:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:8d:31:b0:c9:cd:9d:d1:9e:4a:e0:f3:a0:
05:85:8b:c4:6d:83:6a:94:eb:44:ff:d9:ff:8f:bf:
9f:ef:03:4b:13:4e:4d:94:d0:ac:2c:3b:e6:d0:bb:
1f:1a:a8:0a:20:cc:90:34:0f:1b:aa:0f:bb:96:90:
98:fa:fe:17:ca:f7:54:eb:98:49:04:66:95:57:6b:
6b:62:41:8f:b8:f8:aa:6b:fb:7c:60:a3:76:d1:92:
d8:0a:92:fc:9c:2f:44:5c:2d:d2:83:d8:1e:e7:2b:
89:df:d6:92:ed:f7:b3:c9:3b:f4:9f:10:1d:bf:25:
18:c7:d2:60:81:9c:57:d8:ac:25:4f:72:04:5c:8f:
62:cc:7f:0d:a4:54:32:02:ad:da:e1:df:9e:cb:06:
3c:81:72:6e:7a:53:b5:1f:8f:a7:db:4e:b2:1f:3e:
bc:2b:e4:a2:99:bd:86:7a:f8:fd:a0:b3:30:46:6b:
87:f0:0c:ba:9a:55:6c:2b:99:7a:83:cc:cd:1d:09:
95:3b:dc:00:e5:4e:12:25:63:cc:83:8c:75:54:ea:
c8:77:40:2e:ed:ff:47:0b:9c:0c:64:7a:26:01:a9:
bd:09:cb:74:82:a6:d1:49:28:25:35:3f:e4:8d:84:
be:f9:8f:45:5c:e8:06:c3:96:f8:81:94:57:12:bd:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.186.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c4:bb:3f:5d:64:0b:0f:19:24:2c:07:74:8d:8e:75:59:77:
b4:cd:20:a4:2d:c6:36:14:fe:e7:e5:4b:5e:76:72:b9:a2:19:
30:4e:69:99:c5:ae:dd:47:8a:21:0a:2a:ca:28:af:04:31:f7:
0a:d6:7c:76:19:e7:7a:fd:86:7c:b8:79:a7:d5:5d:52:5c:80:
cc:01:12:70:ac:54:b9:0c:e9:f0:84:07:86:9a:be:ac:15:9d:
4f:6f:32:3b:dd:21:7c:ee:ba:40:b0:7e:6a:3b:52:e5:26:f3:
47:45:85:e8:51:09:b3:84:64:d9:ce:f1:36:07:d4:56:bd:42:
dc:96:de:9d:26:e0:47:be:9e:77:d7:60:08:3d:a6:cf:9d:06:
9f:5e:c5:a3:c6:4d:71:2c:2b:59:dd:56:ee:21:51:b8:32:fb:
ad:19:6c:93:37:e7:ce:70:12:0b:e2:7c:08:db:ea:88:b9:31:
66:dd:fb:03:38:45:6a:37:72:66:4a:44:6e:5a:85:d6:f3:9a:
be:a0:ee:0c:4c:f6:f9:d7:45:59:bf:4d:d1:97:80:48:94:59:
ea:10:96:8c:8d:d0:04:d2:a7:25:54:dd:75:92:af:76:04:50:
7f:c0:01:2e:52:51:63:8d:cf:30:39:46:cf:30:d6:37:d3:7b:
48:ff:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:12:34 2026 by rpki-client