Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer (raw, json)
Hash identifier: f4ptMvMwedLnt7YvR/3fjHMrEcumL9XLhIXoUMZpvKo=
Subject key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 688D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Jul 2025 05:14:39 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 148.195.0.0/16
IP: 159.73.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26765 (0x688d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 21 05:14:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:d6:00:cb:f5:4b:39:4a:7b:7d:9a:05:8f:
e5:09:91:9d:c1:34:1e:66:9a:aa:14:d9:3a:56:fe:
42:c3:8d:c5:3b:0c:9b:ee:36:65:a6:6a:bb:2c:5b:
61:34:a8:a8:11:f3:ee:e7:10:5d:a3:09:d3:23:50:
dc:22:5a:aa:94:e8:f1:f6:4e:6c:5c:ef:31:fb:8d:
31:60:6b:be:37:9b:f7:77:f7:e5:d2:00:bd:84:79:
8f:92:fd:46:aa:7c:58:64:51:82:6a:7d:bb:1a:ff:
13:f0:3e:e9:44:2b:45:30:ec:97:67:f3:0b:5a:63:
40:e2:06:09:0b:4d:75:bc:bf:c5:a0:72:62:f8:c9:
2c:62:1f:b3:af:d1:26:b5:76:ef:e3:65:96:75:56:
8c:e3:4d:8b:df:e8:70:c8:e6:56:1c:9e:4f:6d:a6:
fe:b3:89:a4:ef:e8:34:f3:d7:38:44:58:7a:30:42:
9f:ca:90:5a:a5:93:35:bd:b0:98:5a:70:ae:7b:2e:
2d:cc:2d:06:17:f7:80:1b:5e:1d:0a:b8:1d:0a:d6:
ce:38:48:71:4c:67:23:11:d2:d8:09:7d:e9:c1:8f:
70:22:ed:1f:ec:2f:8f:e7:21:83:a9:f3:0b:cf:e8:
4f:bb:34:a2:ad:bb:ce:57:03:f3:e1:13:74:3a:6d:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.195.0.0/16
159.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:42:41:f4:d1:2a:5f:bb:00:d8:9e:b2:a4:3e:f9:63:fa:1d:
3a:f0:97:18:8e:7b:45:e5:de:74:f5:46:df:17:fa:aa:99:19:
ce:ce:da:d9:2f:39:a3:b4:e1:0e:83:9b:8a:36:b5:b5:93:e6:
52:7e:f0:54:85:36:9e:34:e4:95:11:b4:c9:ce:07:ed:95:f4:
48:fc:b1:34:c3:78:3f:4e:84:b3:34:6d:b1:66:36:68:e0:27:
cb:b7:7b:72:a0:54:27:8a:3f:f6:d4:83:43:b3:54:20:e8:bf:
a6:28:e9:6f:b8:c6:e3:fc:67:98:47:6c:72:17:05:82:28:61:
ce:58:2b:31:6f:55:f0:c5:11:61:58:12:be:c5:d0:0b:4f:76:
93:f5:29:47:a9:a2:65:90:86:5d:1a:48:aa:bf:d1:fd:7e:92:
78:5a:fc:5c:73:ea:f2:a6:fe:90:8e:2d:50:d3:ac:ed:c9:0f:
15:23:4b:d0:c2:9d:f0:00:65:50:06:3f:f8:34:74:40:48:6d:
a0:80:da:a3:f7:f0:dd:d5:b9:66:fb:8e:d6:db:2a:76:9b:78:
54:ca:2e:9e:54:13:36:c0:85:0d:b4:1e:fe:7e:bf:58:55:27:
20:40:f4:a1:02:17:82:aa:26:2d:17:5b:24:78:c6:a3:d5:a0:
9f:bb:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:22 2025 by rpki-client