Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
File: 0S_1veXU0upxiMsALH_wFtyZTXI.cer (raw, json)
Hash identifier: 7c5zmT7hztJY48PQItiPDyt8y6NUn+2nvB8QzFGUUf8=
Subject key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76CC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:58:18 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 152.101.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30412 (0x76cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:58:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:4e:3f:9c:3b:64:c2:21:b8:5f:fd:06:9b:
8b:0d:f0:1a:d3:00:cf:cd:5b:ee:3f:b9:f5:6d:ec:
8f:cf:14:9f:b7:18:ea:a9:6f:60:a2:6e:27:4a:b6:
03:e0:ac:8e:b6:ce:9d:cc:62:bf:b3:34:77:e7:a0:
49:cb:fd:bf:05:60:bd:16:a8:45:91:dd:e1:b9:7f:
c2:85:ba:03:be:02:d6:40:36:09:f5:ce:d2:48:fa:
c2:ce:f0:9c:6d:96:90:f3:02:0e:10:62:15:66:ea:
fb:d9:7f:6d:c8:7e:42:ca:9e:b8:c6:60:ad:03:25:
50:14:02:1c:b0:7a:0c:ff:e5:84:73:61:91:a6:cc:
84:60:4b:af:49:40:25:33:00:42:d2:76:15:9b:21:
ea:86:ce:81:00:de:b4:8b:be:b2:e1:ca:f7:44:3e:
32:39:88:bc:d3:b8:04:2a:0e:3a:15:9c:4e:a5:eb:
23:10:3c:09:be:44:b4:6a:a4:e3:c3:24:db:ae:d6:
76:6e:bc:fe:95:78:5a:fb:0f:37:ad:10:39:1c:df:
3d:5c:f9:89:8d:07:ad:60:7d:f5:6d:4d:7c:28:98:
b5:43:06:fc:3c:ab:ea:3d:4a:96:ff:6e:d5:af:6e:
65:f8:de:d4:2e:f4:eb:b5:6e:68:fe:89:22:db:9d:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:c5:06:ee:2f:5d:2e:f5:b7:28:ef:55:c7:47:e1:1f:d2:ab:
1a:05:56:d7:a3:7f:88:68:4a:cf:13:3c:8f:e0:29:a8:92:ae:
b0:be:9c:3d:84:b2:85:5e:52:10:12:3b:9f:10:0b:49:32:c6:
d8:c0:99:53:78:ab:fb:98:40:83:16:a2:e1:21:f1:59:a3:09:
ad:e5:67:dd:77:cf:f8:2f:1f:4b:68:8f:55:43:9e:11:fc:05:
5a:f9:09:4c:6d:c2:f0:f7:29:07:2a:9a:c2:f6:0d:3c:aa:70:
5d:83:dd:98:16:f7:46:32:47:a8:56:be:0f:33:b6:75:b1:06:
f9:be:a2:81:b3:d9:c9:a5:3d:be:3f:d8:f5:d0:ef:64:9c:bb:
5c:0c:78:f6:27:49:75:13:8d:e7:fa:7e:ad:fc:51:94:bf:d7:
e3:da:67:8e:e8:8b:cc:36:5f:9e:3f:79:f0:ba:42:5e:6f:48:
79:85:ad:eb:97:5a:40:a2:a0:f1:b1:53:9b:c3:f9:81:6d:b2:
26:c5:66:0c:08:07:89:ee:4c:cb:13:09:35:4e:e2:07:06:3b:
68:03:ec:0a:a4:e0:a1:5d:b6:1a:df:61:c8:cf:83:87:c2:56:
c9:34:ff:c4:fc:2a:eb:ba:b1:75:dd:17:04:06:c7:41:1d:b5:
d0:2f:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:32 2026 by rpki-client