Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
File: rDzLekAZEcjlFT8wFmpUyacWP3s.cer (raw, json)
Hash identifier: t/Xww3oTwsD6yY05i80KJrmoHC+aRZXM34Yj989V7D0=
Subject key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 83BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Oct 2026 13:21:18 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.0.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33724 (0x83bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 19 13:21:18 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:aa:ae:2c:9e:d3:5b:bd:1f:17:99:b4:d2:
20:d5:d3:ec:69:8b:5c:1c:24:72:26:2f:db:90:70:
2e:18:5b:2b:c0:3a:54:09:10:5f:51:63:2f:08:f8:
a4:fa:8d:b0:cd:0c:ee:a4:15:23:54:c2:ea:af:9e:
63:24:be:92:76:1d:2b:f6:d4:f1:38:5f:db:a3:49:
e1:85:ec:93:68:42:62:64:24:fd:16:2e:42:1d:d3:
78:4a:92:74:03:86:f9:da:c9:9a:81:d8:10:7c:f1:
dd:c5:79:e3:ed:29:42:14:80:1e:83:f6:a2:ce:6b:
de:51:35:c7:2a:52:a0:be:1a:8e:a3:fb:91:c3:0a:
f5:e6:5f:36:64:07:ed:a8:45:d2:38:b2:8b:41:78:
33:e3:3c:8e:0a:98:33:c6:43:55:79:8d:a2:12:28:
d3:ec:6e:5c:bd:52:c0:40:34:cc:f3:6a:99:a3:f8:
cf:67:0c:95:ab:b2:13:67:64:81:ab:4d:fd:c2:f3:
c4:0e:f0:ea:96:35:f1:a1:e2:57:6c:20:c0:b3:e2:
b8:6c:32:bd:f7:2d:01:22:cf:22:a0:58:96:9e:c2:
44:16:a6:97:ba:66:13:89:ee:75:61:a6:d5:4f:0d:
60:70:bb:30:c0:a7:cf:6c:50:77:64:7f:ee:62:e2:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.0.0/23
Signature Algorithm: sha256WithRSAEncryption
35:08:41:1e:76:59:c2:c9:b2:4b:c9:6e:45:ea:3e:44:f3:1a:
57:a9:9a:25:85:48:b5:bb:56:00:af:5c:7c:fb:55:be:e3:48:
1e:fe:ea:cd:62:61:45:b9:05:e7:44:af:c0:fe:16:dc:8b:57:
25:a7:a5:b2:f5:a1:2c:72:0e:3e:36:29:52:c2:2d:16:7e:03:
da:88:d2:ec:6f:14:d5:80:c1:02:2b:a9:f5:60:2d:6d:5b:c8:
49:a0:86:2c:cf:58:1a:28:7a:7c:3b:c7:c6:ba:e9:02:c7:18:
7c:70:00:3a:2d:45:e1:ac:bf:36:a7:be:29:58:8c:37:1e:68:
d6:47:61:1d:33:f6:76:3b:4d:15:47:8f:15:e6:86:e8:12:82:
cb:92:cb:48:60:05:87:fd:39:cb:71:f1:f9:fb:c8:c7:35:af:
29:9f:6c:a7:86:a9:12:fb:8c:f6:ec:13:a2:00:d1:05:ac:4a:
c7:9d:63:fb:27:78:7f:25:7a:d1:a2:d7:ae:44:b6:9d:65:e9:
26:8c:77:99:9b:23:18:53:8b:00:7e:1c:89:b6:09:f4:46:b5:
b8:e0:69:1a:fe:55:76:81:94:60:d1:1c:01:af:fd:f5:8d:b0:
4b:ba:0a:64:bb:a2:3b:2e:47:34:d6:c3:78:ad:4b:2f:2c:f6:
4b:3d:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:37:04 2026 by rpki-client