Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dnhlUDUAgI7kc70jMQ2VNOjeysU.cer
File: dnhlUDUAgI7kc70jMQ2VNOjeysU.cer (raw, json)
Hash identifier: ucDGNSxjHW5lZmr+SJNe/m5wuPGCZLYdT3jDu+2hRYM=
Subject key identifier: 76:78:65:50:35:00:80:8E:E4:73:BD:23:31:0D:95:34:E8:DE:CA:C5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8243
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Sep 2026 05:18:39 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.190.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33347 (0x8243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 15 05:18:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91A4BD5, serialNumber=767865503500808EE473BD23310D9534E8DECAC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:bb:b8:0c:52:c6:4e:26:7a:75:84:19:ad:
f6:90:7d:3c:27:9a:52:5c:da:27:63:cb:5f:32:49:
39:69:79:b9:2e:8c:88:8d:4c:65:69:b2:ba:b9:a0:
49:7a:00:b8:03:7a:db:74:cf:07:9d:64:ad:0f:b7:
e5:1c:db:a4:2b:7b:3f:67:46:99:fa:2e:e6:64:b0:
b3:e2:b1:21:22:82:f4:14:d7:67:f3:91:61:ac:8f:
e9:68:89:38:01:5d:93:71:b9:6c:e9:80:00:3f:24:
53:fb:a2:f5:d4:53:76:e2:7a:44:51:f8:50:ac:e8:
f2:b5:63:82:4e:7c:7b:3a:b2:12:a1:50:b8:9b:b7:
31:2f:3e:de:af:8c:dc:b9:76:37:97:f2:f2:74:63:
15:ad:8f:2e:74:f7:2e:6d:d5:0f:ca:a1:8d:0c:ea:
fc:73:b7:ff:f5:6c:ce:d3:44:dd:7d:a0:87:9c:32:
07:8d:2f:32:48:fb:67:e6:f2:bf:71:6c:0b:bf:4a:
cf:3e:ba:7b:c5:97:7a:60:14:10:e2:c1:d6:8b:7f:
cf:4a:26:86:ef:4a:e6:8d:af:b1:38:84:64:ff:05:
d1:11:b6:2a:31:0a:cd:0d:86:af:54:1d:4f:ee:34:
63:85:9d:18:c9:17:44:d7:44:b0:cc:c0:18:df:0b:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:78:65:50:35:00:80:8E:E4:73:BD:23:31:0D:95:34:E8:DE:CA:C5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:54:aa:c7:0c:dc:f8:c1:19:69:75:70:e9:82:02:1d:14:30:
9c:2a:bf:f9:d4:0e:1e:6a:d5:8c:66:49:4b:2a:4e:55:45:a6:
9c:88:3c:19:5e:7e:52:58:b2:2f:b6:78:e3:82:32:3e:b9:1a:
04:ed:e2:97:6a:b2:c0:3b:fc:5b:03:d4:49:e0:d0:93:78:d1:
67:ea:fb:70:e3:1d:ad:b7:63:d4:1b:e5:e4:b3:90:c9:be:63:
96:61:4c:14:a3:07:72:3d:e5:77:12:f9:ed:93:19:ed:8c:cd:
7f:04:13:4b:1c:d1:31:63:f1:e0:fe:fa:d1:a2:f3:b3:ba:77:
35:85:15:1f:4e:14:78:69:f8:e3:80:68:b2:f7:d0:d5:91:19:
df:f6:63:8e:dd:b0:71:df:55:71:28:19:e1:88:f6:8a:31:2e:
63:a7:fc:72:f2:ff:d7:2a:0a:85:7a:da:6d:de:b5:9a:7d:22:
19:58:a7:f2:cc:ca:c4:ed:f6:fe:7a:52:4d:69:7d:b4:fc:cb:
83:50:58:37:cf:51:c0:56:cc:d3:e9:ed:ae:e5:e9:12:2b:2a:
db:ee:86:d9:7d:8a:eb:59:9e:b9:74:11:f9:d8:1c:5d:f4:1e:
6b:46:d9:76:47:cd:7f:8e:53:6e:71:39:13:85:ce:2a:05:fb:
55:d9:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:03 2026 by rpki-client