Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.cer (raw, json)
Hash identifier: MihulC1nd3hR8qlZYGYTxXxSE0Oq4WX/ISPoYmFE6KE=
Subject key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7523
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:49:37 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 198.17.7.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29987 (0x7523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:49:37 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:21:90:3c:59:23:b7:23:d2:6c:c8:f8:1b:
94:36:57:fd:78:66:8f:27:59:9e:72:5d:c0:47:dd:
ba:9b:b3:6b:14:7b:3c:ab:9e:48:28:50:b8:e8:a5:
8a:02:54:f0:ae:6f:48:93:47:20:fe:c8:8c:02:30:
43:54:b9:b3:c0:bb:0e:41:79:2b:1a:04:1d:ba:67:
dc:f8:3a:23:2b:1e:c5:cb:40:a6:13:0d:78:fc:83:
10:d5:6f:85:27:bb:cb:23:61:2e:57:6b:d9:16:5d:
f2:c9:25:b0:47:50:c9:56:29:da:72:78:5b:d9:87:
25:a2:1a:99:05:16:da:b2:57:ed:8f:aa:f4:c7:89:
4d:17:64:8b:3c:51:c8:16:aa:a8:8c:31:c8:80:97:
b1:1e:31:0c:d2:51:aa:53:4f:c4:46:ce:a3:e5:a5:
1f:fb:c8:44:9e:f0:c4:10:f9:aa:66:25:d3:b7:aa:
f2:91:0c:66:01:a5:d0:d5:8c:5f:36:8b:aa:eb:0e:
72:ba:47:dd:96:43:2c:6b:0e:48:74:87:7e:43:7f:
cd:09:f5:de:78:9a:bb:48:a0:fb:a7:24:99:f2:47:
e5:34:fd:bf:1b:86:b4:50:01:e7:ed:c5:08:4c:66:
fd:dc:b2:07:dc:2a:f7:9b:69:b8:0b:09:d5:a6:c6:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.17.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7f:f4:b5:3e:0e:b6:1a:ef:d1:2b:84:a1:b5:fa:94:98:4e:
be:bd:91:ea:33:6c:88:48:2d:9b:9b:e4:83:fd:87:1b:cc:86:
61:26:68:6d:ea:54:37:ae:28:73:67:35:8e:3d:33:cb:ab:2d:
fd:15:3c:4b:24:58:2e:d6:e0:21:e3:63:b4:e7:47:56:ed:86:
ac:8c:f8:75:27:3f:53:ee:c4:f4:c4:b0:1b:3b:0d:ac:82:19:
3f:d4:a7:d4:89:d4:d9:c9:5d:18:95:6e:cb:06:e7:b3:b8:c8:
6a:eb:1c:d6:e6:be:dd:3c:1a:98:ed:3e:06:3c:31:6c:d0:6d:
8f:32:bf:d6:a5:04:b6:a2:f6:04:3a:0a:c6:23:af:6b:ee:fb:
23:85:2e:13:d6:1c:45:83:f7:57:a7:49:42:a8:b8:8b:e8:2b:
20:8e:c2:97:d6:19:f3:26:6f:37:8d:9c:ab:16:35:e7:17:fa:
f1:15:40:03:32:14:86:50:25:be:fc:98:c6:e1:13:1d:88:72:
27:8a:38:e0:4a:88:b8:30:57:b0:1a:50:00:7e:47:3f:b4:07:
e8:7b:6e:cc:6a:99:78:40:8f:4c:88:31:e2:2d:9a:87:05:e1:
c2:4e:94:7e:aa:c1:1a:dc:b8:61:cf:ec:08:62:2e:f3:47:71:
0e:97:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:38 2026 by rpki-client