Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer (raw, json)
Hash identifier: utpbMF7wGXVSyLPDKOAGJjuMwqgzsqbfM0C4Ef9ii1k=
Subject key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 802F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Aug 2026 15:06:22 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 148.195.0.0/16
IP: 159.73.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 04:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32815 (0x802f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 4 15:06:22 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:d6:00:cb:f5:4b:39:4a:7b:7d:9a:05:8f:
e5:09:91:9d:c1:34:1e:66:9a:aa:14:d9:3a:56:fe:
42:c3:8d:c5:3b:0c:9b:ee:36:65:a6:6a:bb:2c:5b:
61:34:a8:a8:11:f3:ee:e7:10:5d:a3:09:d3:23:50:
dc:22:5a:aa:94:e8:f1:f6:4e:6c:5c:ef:31:fb:8d:
31:60:6b:be:37:9b:f7:77:f7:e5:d2:00:bd:84:79:
8f:92:fd:46:aa:7c:58:64:51:82:6a:7d:bb:1a:ff:
13:f0:3e:e9:44:2b:45:30:ec:97:67:f3:0b:5a:63:
40:e2:06:09:0b:4d:75:bc:bf:c5:a0:72:62:f8:c9:
2c:62:1f:b3:af:d1:26:b5:76:ef:e3:65:96:75:56:
8c:e3:4d:8b:df:e8:70:c8:e6:56:1c:9e:4f:6d:a6:
fe:b3:89:a4:ef:e8:34:f3:d7:38:44:58:7a:30:42:
9f:ca:90:5a:a5:93:35:bd:b0:98:5a:70:ae:7b:2e:
2d:cc:2d:06:17:f7:80:1b:5e:1d:0a:b8:1d:0a:d6:
ce:38:48:71:4c:67:23:11:d2:d8:09:7d:e9:c1:8f:
70:22:ed:1f:ec:2f:8f:e7:21:83:a9:f3:0b:cf:e8:
4f:bb:34:a2:ad:bb:ce:57:03:f3:e1:13:74:3a:6d:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.195.0.0/16
159.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:9a:2c:25:36:bf:85:8a:a6:8b:4b:fb:92:d5:c7:45:d5:81:
ed:90:ea:ad:b2:c8:3d:c3:da:41:86:a6:16:52:e2:16:6f:63:
ab:70:c3:c6:76:d2:41:c4:49:bd:1e:e2:53:52:48:ae:e5:b5:
2a:ce:84:78:d0:d4:72:42:f7:90:33:a8:fe:a7:83:29:4a:e0:
bf:68:9d:ff:d1:26:59:3f:10:a3:db:b2:d0:28:be:3d:4b:21:
9b:dd:20:f9:58:51:86:4d:28:ed:04:3a:4e:0d:fa:90:75:04:
d1:f5:0e:6c:62:72:bc:5f:87:12:40:c3:27:69:5c:23:c7:a2:
98:41:9b:ac:fa:21:f7:6b:40:4f:69:13:7f:c9:1c:82:5b:6e:
42:04:d5:49:af:37:ac:5d:eb:16:1d:3a:1d:c2:32:d9:1a:55:
77:18:90:df:41:eb:ca:4a:ea:c1:d7:8a:06:64:67:35:12:53:
97:46:f3:0a:58:7f:4f:9e:c3:11:5d:a6:0c:8c:0c:e8:d8:5d:
e7:d9:c2:35:13:39:85:09:87:f0:27:67:1c:70:6a:7f:fd:42:
16:a3:9f:f7:7f:3e:fa:57:54:bb:13:13:bf:eb:0b:b9:c7:8c:
88:d1:f7:d0:16:8e:85:92:ee:90:3a:1a:d3:97:6c:48:a9:10:
f5:8a:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:16:28 2026 by rpki-client