Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
File: -bspsKvoSef-GA4znkscKCNoxSE.cer (raw, json)
Hash identifier: ZuLbE0XQ9HnP30HptcShZ+1rAkQmJqaRBbqTaI1wSP4=
Subject key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76AA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:40 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 143.92.112.0/20
IP: 148.222.64.0/20
IP: 148.222.84.0/22
IP: 148.222.92.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30378 (0x76aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:40 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:05:7e:96:70:d8:83:fa:5b:a9:38:fe:9e:
98:dd:01:1b:e9:da:ab:52:2e:c3:1f:6c:56:75:af:
50:74:5a:86:5e:a4:60:c0:d6:73:ad:6a:80:16:2b:
af:04:bd:ff:b2:da:43:f7:fa:0e:1a:15:b9:d6:08:
84:79:f7:da:01:1f:37:9a:15:d4:1c:e8:dc:2f:05:
07:42:67:b6:02:e3:ba:3d:23:dd:1c:b9:b0:24:b5:
0d:d8:7d:7f:b6:8b:73:20:57:05:12:a9:94:f2:29:
0c:35:5b:2d:5b:ab:62:28:bf:42:5b:ea:d1:3f:6b:
a3:dd:2d:d4:ac:fc:6a:fd:d5:c4:30:0d:ac:e1:bf:
a5:a5:0d:32:75:94:9b:4e:3e:a4:f6:23:5c:7a:40:
01:78:80:b2:80:04:95:ab:31:63:59:3c:66:53:73:
4a:f6:eb:d0:2f:e9:47:f7:cd:02:45:e0:0c:50:24:
fc:21:64:36:97:a1:6a:d2:e5:ac:19:8d:f4:91:64:
aa:ed:db:99:ee:49:08:73:78:9b:67:83:4a:e6:6f:
f5:09:36:11:da:0b:f2:3a:e3:5d:80:3d:c6:9f:32:
c7:1e:5c:b2:09:2a:d0:e9:3a:6c:56:81:e9:d6:cd:
38:12:11:85:27:15:7f:a6:55:94:ab:8a:03:c8:29:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.92.112.0/20
148.222.64.0/20
148.222.84.0/22
148.222.92.0/24
Signature Algorithm: sha256WithRSAEncryption
01:35:e0:ab:76:c9:50:f9:fa:e0:1c:6f:44:5c:9d:a8:b8:fc:
94:cd:2f:81:df:76:dc:f5:1d:b4:2f:de:89:c6:6c:d8:39:30:
79:09:da:64:65:3d:3d:f5:2c:03:ca:ec:93:b3:4d:50:35:f9:
1b:21:d9:36:47:76:4a:a4:13:d3:ee:11:6e:cf:9b:b9:3a:ce:
34:b8:d7:24:52:71:d1:1d:00:26:d9:b0:53:05:da:10:54:fd:
00:c5:34:3d:16:ea:c3:3a:2c:9e:c8:2a:ff:64:bb:68:69:96:
d4:d1:5f:4b:de:a4:47:97:2d:b6:11:d7:43:19:46:56:4c:1e:
35:db:a7:62:b0:4a:dd:c3:c8:07:a3:75:99:56:33:ce:0a:89:
9b:a5:5b:53:fe:ed:fa:21:52:05:80:9c:8c:a2:83:75:69:d0:
99:d3:f2:ab:8e:ff:a5:08:70:cc:d5:28:f6:23:64:2b:ac:d5:
d9:72:29:ee:8d:3e:0c:14:7d:20:60:cf:87:53:65:ee:f4:40:
c8:e1:7d:bd:05:a0:6f:bf:68:3a:b9:7d:a9:03:ee:c0:da:8a:
8f:e6:b8:fa:74:a6:54:c1:87:f1:7e:dd:ac:80:7f:15:a5:23:
37:41:a6:ca:b6:12:47:8d:21:e8:d7:03:84:01:5f:0a:94:18:
40:c6:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:08 2026 by rpki-client