Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
File: wfLqVt--Dy-St0HdaM9WcRWzspI.cer (raw, json)
Hash identifier: oYZVX3gNIQcuEOQw8bs8e/X0AS1TmeR1A/3KqC0pJYU=
Subject key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 81BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 12:50:49 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.250.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33213 (0x81bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 12:50:49 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:47:e6:72:cf:6d:1c:65:60:ae:dc:04:6f:
2d:77:95:93:8d:19:74:8e:88:8b:e9:fa:50:3c:4e:
e6:2c:2e:96:37:72:f2:bf:e2:7e:a7:d1:8c:51:e1:
42:42:32:5c:8c:97:41:6a:df:ce:a2:bb:e4:de:e2:
9a:17:ca:89:de:03:23:68:e8:60:ad:8d:b8:f0:4d:
6c:8f:7c:a3:9f:63:0b:36:fd:2b:e6:43:93:a1:70:
39:bf:22:de:ed:70:ae:f9:c9:53:8f:5a:d8:3c:ad:
b9:c9:1a:a6:86:b1:47:09:8d:9f:05:be:6e:f6:d1:
23:6a:da:cc:52:11:cf:67:b2:26:d3:78:29:45:ba:
ba:fe:2b:ad:a9:29:03:2d:c7:5d:d5:cd:99:ac:d9:
1c:b5:e5:4c:2f:a9:ee:06:58:aa:e7:92:d2:10:e1:
4d:f3:04:8b:dd:85:43:26:a1:ab:66:d7:75:59:c1:
72:61:44:6f:bf:0b:f0:c7:da:7e:55:01:17:82:3c:
2e:76:df:0d:b2:70:70:51:3e:32:d5:f6:c6:65:73:
96:de:31:fc:6e:be:1b:3b:69:4f:be:f5:7f:96:0f:
93:11:20:f9:68:71:78:35:db:e1:3c:83:2e:20:82:
3b:23:04:89:72:33:38:a0:c8:ac:bc:c1:0d:ae:db:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.250.0/23
Signature Algorithm: sha256WithRSAEncryption
85:6c:3e:72:a3:19:8f:8f:b6:77:5a:32:5d:4c:9c:6c:eb:06:
a3:59:7d:2f:b8:cc:84:fb:b9:6b:da:9a:b6:e1:ba:f3:19:a5:
a3:4f:5a:ca:94:f3:03:2b:07:e2:53:ac:2a:34:58:86:c4:d9:
9e:10:f8:fc:05:2f:1a:bb:30:66:97:dc:51:29:81:b9:05:e9:
95:2a:fd:0a:69:d4:75:71:dc:67:82:d8:05:ff:06:bd:72:42:
dc:0d:09:02:e1:1d:b1:80:ad:5e:83:63:fd:ce:8f:34:32:92:
09:f4:98:8c:44:86:19:38:da:90:75:86:47:84:a6:e7:ae:df:
fc:5e:f4:15:e4:8d:bf:60:9d:18:c1:84:39:15:88:b5:e0:93:
2f:71:18:9e:69:c6:8a:84:42:9e:ac:fc:55:a4:98:99:0b:21:
ed:c4:26:c2:2d:f6:af:f5:37:b2:b1:03:cd:39:93:05:8d:67:
6c:38:e0:f4:ad:00:ba:4c:25:1d:dc:22:ee:9f:9b:85:39:41:
26:b3:aa:b3:dd:45:b6:45:df:5b:d5:a8:04:c7:ef:8b:0a:82:
71:ca:62:cf:9e:c8:4f:30:d2:33:c4:17:d2:2a:d1:dc:1d:6b:
59:53:63:13:1b:e1:82:63:95:ad:e5:f6:2d:f6:5e:62:17:b0:
ad:49:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:55:50 2026 by rpki-client