Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer
File: xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer (raw, json)
Hash identifier: 0bIzcRuVLUB0iQnTIUdYvnzsC6UFYR18UeyXFlusO4E=
Subject key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 811B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 22 Aug 2026 12:42:39 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.25.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33051 (0x811b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 22 12:42:39 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:5d:4f:82:3a:f4:d4:8b:17:86:81:55:11:
8f:3e:31:46:95:8d:1d:36:14:b6:ef:84:f7:21:ab:
b0:d5:51:2a:2c:49:6e:1d:b7:6e:ec:7f:d9:33:d2:
d7:16:e0:84:81:91:f2:3e:b3:b6:df:a0:8f:0f:e1:
17:99:c6:67:3a:66:9c:c3:ed:f5:79:80:80:96:ce:
d2:05:0c:b4:b6:fb:d6:a2:46:6b:13:c7:9b:b8:fe:
df:26:ab:ee:83:e0:88:b1:6c:24:22:a7:d4:8c:c8:
a9:7f:35:dd:8e:7c:51:cc:58:4a:6a:55:bb:42:af:
ab:a3:5c:7c:fe:c9:17:3e:a2:8c:18:40:77:54:88:
b4:75:67:8c:a3:10:6a:a0:0f:dc:1c:36:a3:a3:85:
11:03:84:d7:e2:0d:15:8e:89:8e:de:be:8a:63:a4:
01:43:e6:b5:97:4a:b5:99:1a:34:f3:37:d4:74:55:
0f:87:f2:34:2a:3d:78:94:6f:2e:3d:9d:3b:9c:1c:
19:77:c3:a9:12:53:32:24:fc:e1:ef:4d:19:42:af:
a9:ea:fa:50:cb:e0:b8:1f:03:ac:d8:17:c9:0b:96:
80:8f:a4:87:0f:70:e8:71:9a:79:4c:9d:46:09:38:
e1:91:fa:d9:2b:85:a0:1f:0e:0f:db:e5:d7:a4:a1:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:34:f6:ae:8a:18:98:2b:77:b9:13:38:e1:e0:92:87:80:45:
f8:c8:af:8f:18:19:a5:b7:29:e1:d2:14:03:49:65:a3:6a:d0:
64:c7:cd:56:6b:93:07:a2:80:f5:0d:fe:f6:5d:b4:2a:e6:a7:
0b:02:2d:bd:da:03:d2:59:e3:34:cb:4a:75:48:a6:3f:7d:52:
b5:5d:8e:52:05:41:8e:3e:b2:19:e1:36:7e:fb:e5:28:3b:a3:
13:46:64:f1:ea:b8:d3:04:3d:08:de:fc:33:d7:12:ac:8f:59:
bb:ba:0c:38:7b:14:40:51:11:b7:bb:dd:df:db:53:6e:c6:e6:
84:46:09:e3:fa:be:8c:f0:08:8a:67:68:f8:95:b5:56:83:c0:
92:53:f1:ba:db:2c:b9:97:ea:bc:95:17:7c:df:63:ac:f7:97:
ee:68:d7:4d:b4:db:b8:c2:21:a4:66:b6:52:3b:ba:7d:78:9a:
4a:98:ee:c7:8e:13:cc:36:b3:ba:68:ee:0e:99:a7:03:3a:c9:
f4:ef:68:65:e9:99:1d:dd:d1:ec:54:4f:ce:a3:40:a5:99:18:
18:98:eb:b8:48:b1:30:e1:3a:e0:36:26:c5:e1:9b:19:8a:51:
b8:d4:2b:23:42:36:22:49:6a:89:b1:99:44:ab:13:e9:5a:10:
e0:9e:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:51 2026 by rpki-client