Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer (raw, json)
Hash identifier: aNvK5iJrd+u09L655t31eavPLvImR3P9ZjxjGfqjP9Y=
Subject key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5127
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:25 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.22.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20775 (0x5127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:25 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:35:80:05:5a:5a:45:4b:cb:42:56:85:07:34:
a8:c4:42:f1:31:b5:85:b0:f0:f4:2a:17:bd:f7:13:
f4:4a:5a:aa:2f:ec:6c:3a:35:36:ca:28:24:f5:a9:
9b:48:a1:48:36:38:79:f0:2e:dd:c2:63:2c:ff:b9:
04:86:c7:6c:9b:4c:bb:3b:35:d1:34:fa:b4:57:6c:
af:f7:d4:62:82:05:4a:ad:f6:84:be:91:81:a5:15:
e9:54:98:95:60:76:cb:2b:51:11:a9:96:17:36:c2:
13:0d:e1:60:05:e7:4a:5d:ba:ec:85:7b:da:d0:a3:
c6:e9:cc:34:0d:9a:af:bb:5b:cb:e4:81:5a:65:5f:
93:66:7c:7d:4f:0c:b3:25:b5:c0:9d:20:bf:67:cc:
07:2b:97:f2:7d:62:be:24:9c:76:70:03:0c:55:94:
38:7a:84:e4:b4:f3:02:45:02:9c:00:c0:0e:65:fd:
e1:c5:ba:8c:cc:33:64:30:b3:38:d3:74:da:c5:02:
d7:9c:a5:92:57:46:3f:8b:4f:7c:d5:05:c0:8a:36:
ca:27:4d:6e:7b:f0:4a:39:82:22:b9:46:35:25:ce:
f6:84:e0:0e:d2:62:0f:ba:e9:72:82:04:8c:8b:02:
8b:ad:de:7d:51:72:72:1f:a9:1a:99:86:04:22:bc:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.22.0/23
Signature Algorithm: sha256WithRSAEncryption
29:d9:97:e6:3c:cc:20:be:61:50:4b:f1:be:f7:f8:35:ca:11:
70:99:ad:ac:0c:bd:f1:dd:7e:0a:64:d3:96:90:80:27:02:12:
28:cf:7e:a1:81:1e:2b:df:4e:b2:9b:21:cc:6e:b2:41:1a:b9:
13:45:2d:f8:66:5c:a4:7d:78:d0:40:8e:94:93:e3:90:cd:6c:
b5:c4:b6:fe:f9:2c:f7:bd:1f:c7:2d:8e:79:6b:a0:b8:4a:92:
36:09:2d:5e:61:75:3a:17:ab:c1:51:81:b1:8b:4d:bc:0f:1d:
82:6c:e1:46:d0:e6:82:28:f2:7c:65:b2:20:fc:00:f6:b9:5f:
59:9b:cd:cc:da:a8:ec:69:eb:e2:28:28:c2:02:c7:33:a9:f4:
24:a5:29:ed:22:51:5b:4c:53:ee:4b:30:fb:f5:3f:ff:2b:6b:
0e:ad:80:34:8f:f4:82:15:50:35:22:27:bd:e8:51:dd:eb:31:
7c:5b:2d:01:10:79:42:e2:58:7a:37:cf:4f:3e:09:ab:7d:da:
5b:79:b6:6c:63:28:9d:48:30:e4:10:bc:82:f6:1a:4d:e4:65:
fa:b7:cf:28:6b:ce:3b:00:dd:3c:45:c5:da:8b:e8:35:97:c7:
18:03:3d:8d:51:ee:4d:25:b3:af:e9:29:9c:01:59:48:fa:14:
63:aa:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:05 2026 by rpki-client