Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer (raw, json)
Hash identifier: HsyRelUabXUqWHZVBI3QhQp/FAeAwanzdTl8wiTXnbk=
Subject key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 826C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Sep 2026 05:33:26 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 63.140.0.0/20
IP: 69.194.160.0/20
IP: 139.190.64.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33388 (0x826c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 18 05:33:26 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:a0:e7:6e:d8:4a:34:7e:95:07:41:26:f2:
22:41:fb:e8:ed:c7:ac:ed:39:2a:c4:8e:e8:f2:d2:
7e:06:f7:f5:1d:b2:d9:81:11:eb:37:97:9c:d7:f1:
41:f7:18:f8:41:87:9f:fa:b9:7e:fa:da:a4:b9:62:
f9:87:00:09:00:47:98:b4:4e:7a:73:f9:49:4b:6b:
f0:02:0d:5b:6a:2c:c7:1e:ae:c9:3d:c4:4a:79:a4:
dd:4a:2e:f7:e1:16:cf:5f:b7:e7:6b:aa:d4:b8:ac:
a2:ef:2d:fc:58:84:35:52:17:a9:99:9f:f6:e4:19:
ed:7c:80:57:aa:18:20:e0:85:00:c6:05:ba:4f:a6:
e8:3f:69:2a:6d:4a:42:6a:fb:1b:92:2f:b0:5b:37:
78:1d:b7:1a:4c:54:bf:f4:9b:23:3e:fc:9a:a3:27:
58:01:74:a1:7f:73:39:7d:a0:37:f5:ce:62:b5:b7:
d2:1c:96:8c:b0:ac:e3:b2:ba:a7:ae:57:c3:6c:65:
dc:82:da:93:2d:f3:a7:e2:ea:56:d4:c5:86:8a:21:
eb:0c:9c:01:b9:fe:74:77:63:28:d1:f1:09:9a:e5:
f4:9c:43:31:68:93:b9:c0:9a:9a:16:76:86:b6:9e:
7c:08:9f:42:d0:c4:72:93:f7:50:27:d7:11:da:d2:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
63.140.0.0/20
69.194.160.0/20
139.190.64.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:a2:a9:f3:8d:a3:f7:32:3c:09:85:8c:37:38:3f:c3:9f:6c:
56:97:11:a5:f2:cd:cd:ce:7d:6d:18:8a:08:c0:9b:40:f5:b0:
d4:78:49:26:b8:af:cb:31:5d:50:6d:1b:86:d6:af:a1:e7:b1:
39:c7:db:69:2e:de:ab:11:39:3e:ea:6b:ef:81:0b:cb:fd:02:
5c:dc:25:94:5c:28:d1:f8:8a:1a:f8:21:87:22:2d:a8:94:87:
40:07:69:3a:78:19:01:7d:83:c7:bb:71:2e:fd:fb:05:ed:7d:
1c:46:75:40:da:a5:fb:fc:74:f9:69:66:4f:5a:fb:2a:89:55:
8c:1f:66:17:7f:38:d5:df:c8:b9:50:84:fa:cd:08:2e:25:35:
e0:49:ed:07:d0:b8:95:93:89:52:73:72:33:90:19:da:b5:53:
51:30:f2:fd:fc:78:4a:2d:4d:eb:e9:83:81:98:1b:4f:fe:76:
d2:8c:10:46:df:a4:6a:84:b8:97:32:45:b6:58:33:44:26:01:
0a:ed:76:2d:2f:bf:5b:13:c0:18:e2:f1:23:48:05:45:81:9a:
8b:c9:77:de:25:41:11:b4:00:79:ab:94:a2:c9:de:f9:ff:ca:
bd:fe:f5:e1:9c:06:cc:50:9d:86:22:50:c9:8f:24:91:f8:a4:
f5:ff:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:20:24 2026 by rpki-client