Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
File: izRxuQt6W8ds4_wJrKyJKOtNgXk.cer (raw, json)
Hash identifier: jTKESpvKMtWDyn4c0qNlYJxsQD5NN0D5CXk8xngnVB0=
Subject key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7571
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:19 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.90.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30065 (0x7571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:19 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:e6:1f:2e:d1:9a:c5:f8:f7:77:09:65:60:
7e:83:8a:a0:48:f6:6e:15:34:f0:e2:17:27:ea:65:
c7:f3:74:e2:6a:55:d3:97:6c:bf:e3:8d:b5:e7:77:
ef:6e:13:b7:c6:61:a8:2b:54:66:c9:5a:47:0a:16:
10:8c:4b:d4:fe:2c:03:f0:b3:7c:5e:89:fc:3b:a3:
7d:78:b9:94:27:e0:73:74:4d:2b:da:c0:0a:aa:c4:
79:6d:7d:19:9c:a7:64:3c:69:97:ca:8c:8b:cb:52:
55:f1:26:05:09:85:04:2d:11:02:e0:34:00:5a:38:
78:6e:70:38:aa:77:75:a1:20:a3:32:ec:98:64:fe:
a6:d5:d2:f7:f0:b2:e3:8d:ab:cf:fd:d4:0a:fd:d1:
48:a5:9d:84:db:01:b5:37:5b:6f:75:52:d1:87:9e:
85:0c:50:bd:f3:f9:50:4e:3c:25:83:67:72:b1:73:
bc:1c:6c:01:d3:b2:0c:b9:ae:70:2d:59:32:67:37:
7b:f6:42:0c:89:10:e9:db:03:08:fa:5d:3b:aa:df:
12:8e:4d:f5:38:b2:38:72:6c:84:6b:92:86:80:c3:
a0:fe:b6:df:86:33:fb:d3:5a:48:a5:63:c2:5d:d6:
b3:d3:34:44:f3:a1:ae:39:f3:ad:1f:a3:14:87:7e:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.90.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:d8:81:33:ba:39:1e:33:1a:eb:2e:54:f1:1c:2d:4f:eb:b7:
02:7d:42:00:ba:22:a0:19:0d:e3:31:b1:2d:77:ab:51:33:12:
df:ec:79:40:ea:7d:22:b3:a5:ad:ff:d9:b8:3a:67:c3:9a:32:
f9:f2:30:a2:21:ce:bc:d1:60:5f:1d:0a:6e:78:d0:69:0b:2d:
41:2c:ed:ae:ba:bd:7f:0d:dd:26:f4:0a:f0:08:ad:2d:75:18:
93:4e:a4:41:fd:a5:6a:c4:67:ad:e9:88:bd:65:89:a2:82:8e:
8d:47:63:9b:7b:31:05:38:e3:30:83:e8:dd:fd:c0:5c:34:6c:
e3:16:e7:ce:d9:31:ae:31:d1:3e:bf:59:5b:35:c8:1c:f7:da:
64:b0:8d:4f:3b:fc:76:96:d1:95:6f:76:5c:cb:30:f8:2c:0f:
f6:f8:00:83:62:a5:c9:f1:fa:e5:1d:23:6a:83:58:d6:ec:4c:
2b:56:fb:03:82:7c:dc:28:5f:ee:52:26:65:37:e6:bb:83:00:
d0:aa:37:13:f8:58:f7:33:be:ad:fb:21:86:98:fb:9b:fe:10:
05:63:dd:33:8c:18:3a:d6:58:77:0c:81:b5:95:00:e2:ed:a8:
52:50:d2:81:81:0b:a5:e9:f8:b3:3b:0a:f5:62:7a:0c:53:f1:
b7:a0:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:40 2026 by rpki-client