Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
File: 0omLrZJnkc4JM8CSed-XmNfetpQ.cer (raw, json)
Hash identifier: 4XX7f7vnD8yVlOctey0Q+vErfy6KOWbTTl5jvwzilOk=
Subject key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76DF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:58:42 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.106.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30431 (0x76df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:58:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:3b:98:44:91:ca:10:17:8c:80:ee:83:69:
ef:68:c8:01:0f:19:44:88:15:5d:d1:af:d5:37:49:
ea:46:16:6c:38:5f:34:2e:8e:eb:33:c5:2f:7a:72:
91:a9:f5:3d:98:22:62:95:09:bf:0f:19:e9:f4:fd:
dd:d3:04:56:ff:d3:a6:9b:cc:86:63:1c:f1:de:bd:
bd:55:ef:f3:04:11:33:95:f1:87:71:07:04:41:3b:
5b:f5:d6:38:80:68:d5:53:f4:bf:90:bf:af:20:60:
82:b6:8c:04:24:03:b7:7d:89:d5:fb:68:c8:ea:28:
ae:b6:50:d8:d3:6e:54:db:b7:78:bc:c0:b1:32:04:
4c:0e:61:1b:25:25:35:ec:cd:41:43:3c:47:6e:7a:
3a:f0:d3:6d:24:55:c4:2b:e8:05:e9:9a:b1:8f:34:
01:ce:5e:02:5c:a7:ef:79:86:6b:4f:f2:e9:69:0b:
df:bd:ef:60:b1:6c:b2:0f:5e:0b:73:26:9a:d2:49:
fe:51:6d:8a:2a:99:12:f1:b1:bf:3b:37:41:09:ac:
f8:28:ad:6d:35:62:b4:f2:85:bb:5f:75:85:d8:ec:
22:b1:28:44:80:8a:24:f1:03:f9:f2:34:41:81:42:
e9:66:09:15:65:63:57:57:d7:d5:6f:cf:ad:b8:43:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.106.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d7:e4:5c:32:03:fe:09:38:18:87:77:f5:c8:c0:83:ca:bd:
1e:7c:40:f5:55:88:87:dd:40:4f:5c:4b:ae:f0:6f:8b:c2:8c:
07:6b:ed:84:44:16:a2:22:cd:aa:ec:6f:89:5f:5c:12:ab:8d:
cf:b4:97:b3:aa:eb:c7:23:fb:f0:de:50:22:98:f1:9b:b3:ca:
70:a5:8b:32:3c:73:fb:a8:cb:d8:9e:4f:fb:78:b6:6a:97:af:
70:62:38:2d:59:f8:92:8d:16:a0:90:44:79:93:0e:5e:a7:3e:
e8:32:f5:9d:61:12:b2:16:59:b6:dc:77:09:ee:43:51:9d:d7:
7a:15:27:90:40:ff:47:a1:f7:5d:c6:0a:76:46:47:56:a8:a2:
89:07:4e:9f:ce:75:83:f5:c7:bd:23:da:3e:81:29:f6:38:02:
f6:6d:59:b7:44:54:5b:c6:06:59:b7:d5:1d:e2:39:fe:a4:b8:
0a:4b:7b:26:d8:a1:d8:66:d0:0a:30:a7:04:15:1c:49:f9:75:
71:ab:41:62:81:15:d6:40:11:60:10:e6:51:71:81:60:e3:04:
ad:3a:d7:18:2f:b4:ae:9d:6d:31:be:fe:1b:6f:fd:7d:3b:5d:
a1:a5:0f:fe:b3:57:62:38:16:5e:31:db:bd:86:73:a9:53:15:
f9:ad:9f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:44 2026 by rpki-client