Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
File: xhVwDXyIi-a6dQrezZTYhkaC42E.cer (raw, json)
Hash identifier: 29pSrmV2qR70CMScMZE5Os6evCKvxZboyjF9omLFx5o=
Subject key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 79A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 14:37:42 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.6.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31140 (0x79a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 8 14:37:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:33:79:8d:08:cb:d4:94:29:32:f1:b1:b2:
3d:58:a8:45:bc:2c:57:3f:36:49:fa:9d:d5:a1:0f:
96:00:32:b6:7d:cf:8b:45:72:35:5f:e7:67:59:b1:
6b:b9:9e:7e:1f:16:98:2b:b5:0c:e3:01:31:d8:b8:
65:40:59:32:b8:74:7a:dd:17:96:a2:fb:e7:c6:da:
75:05:4c:9c:41:e5:61:e1:b9:59:a9:db:3d:2f:a2:
2c:48:b0:29:90:2d:11:3c:b8:d2:2f:27:9a:eb:50:
38:ec:72:5d:93:2f:0d:38:a1:a6:8b:5f:e6:db:1e:
2e:4d:c3:08:f0:72:dc:e2:b9:15:88:74:da:78:ba:
01:2b:9e:1a:9f:aa:d9:02:f6:ce:7f:20:e3:1c:32:
1c:1c:45:94:dd:4e:72:c1:b7:6a:3f:f5:0e:6e:aa:
d9:63:e4:ae:c3:48:37:9f:66:74:7f:17:e2:18:bd:
35:09:28:43:e4:32:81:6a:10:99:25:86:ff:0e:7b:
7e:be:04:f6:33:3b:a9:0d:3b:81:5f:d3:6c:26:03:
1c:75:43:20:ed:31:22:31:25:46:b9:88:bd:26:f9:
5a:33:96:82:cb:a4:2e:29:f6:b5:08:aa:b2:a9:fb:
14:4e:b5:17:da:3a:d5:78:06:46:61:64:f3:d3:d9:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0f:79:a1:b6:08:53:01:1a:ef:05:e9:76:48:2a:e3:cd:6d:
a4:1b:cd:55:b1:3c:27:a1:1c:23:9f:f3:26:1c:19:4b:1f:4a:
3b:29:d0:63:3c:b5:b1:51:a2:65:5a:81:c2:85:e5:76:b8:6b:
c3:4d:1d:75:51:e1:bc:4e:06:af:92:85:f1:0b:94:13:3e:46:
fb:e7:e5:f9:0d:d0:74:c0:ff:90:55:0f:0d:94:40:e4:05:b5:
17:0e:7a:9d:b6:ce:2f:b0:d8:9c:59:ca:15:e3:d8:d9:db:06:
26:c5:f3:c6:38:36:95:11:74:d8:4c:53:13:b8:44:d5:5c:f0:
62:39:9e:27:bd:e2:17:33:03:38:0a:af:15:bd:14:01:cd:9c:
69:65:bd:b6:1b:73:54:8a:7e:a8:c7:7d:92:57:5d:26:b7:fa:
52:b6:05:58:78:42:41:6d:71:02:a9:39:87:5b:62:0d:21:66:
6c:28:22:bd:2b:c0:cd:d8:82:94:c9:b2:8a:d2:09:b6:5b:0a:
f2:2c:d0:1e:42:a9:41:e1:23:22:5c:a2:93:2e:35:02:6c:67:
56:73:68:78:41:bb:f1:76:e8:95:e9:13:a3:a8:0c:81:53:e9:
90:5c:2b:f1:50:59:be:5c:fc:79:43:ca:84:c7:42:68:7c:12:
e4:a7:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:42 2026 by rpki-client