Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
File: 119NVHZK705TBIfeterZIyLy4As.cer (raw, json)
Hash identifier: jhUq6M47cc8nnKdF3h/YpyFJVjI4uYdf8zUXXqWrvd4=
Subject key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7670
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:26 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.129.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30320 (0x7670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:ee:e5:c0:a3:ba:7a:78:28:f6:4c:9a:12:
ac:c2:f8:9f:59:7b:6b:41:76:b4:c6:28:58:f7:52:
25:14:1f:c3:99:1d:16:00:9a:10:48:f6:e1:fc:3a:
16:f1:1d:26:4f:52:24:ef:bb:e3:97:34:67:97:09:
0a:e6:16:42:50:85:c0:7f:96:65:d1:21:c9:aa:bc:
e3:d8:06:f4:9e:74:c2:9e:78:06:fc:b8:f9:c4:d6:
64:d2:65:c2:fd:e3:5c:87:41:16:28:dc:e9:65:e8:
3e:b1:b5:e7:5b:c7:2b:25:be:2d:fc:e9:ec:26:99:
c6:66:ca:0b:84:73:f3:d2:3d:90:63:70:01:87:82:
74:3d:02:f0:35:57:5e:79:b3:08:d8:be:87:5b:eb:
80:82:c2:78:75:4c:db:09:2b:69:59:2b:45:2c:47:
a7:c0:54:0a:ca:71:0c:19:5a:ee:77:5a:80:cd:39:
b8:5f:f7:c6:af:84:02:c7:0f:35:4a:23:45:f1:b4:
4c:ed:0f:ac:8f:c7:93:47:21:6a:b9:19:4d:c0:cf:
ee:6b:33:1b:de:b9:a3:7a:35:8f:08:8b:66:3e:25:
4f:36:85:10:d1:fb:af:ce:02:eb:4a:2e:b4:ed:df:
95:96:d0:7e:83:b8:6a:4c:e7:e3:20:81:53:7d:af:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:23:5f:59:01:75:b6:2f:6c:d2:2b:be:0a:08:2f:26:65:d5:
e8:ee:dd:23:4f:33:d6:d9:e3:4d:bc:d3:62:e8:8c:86:90:18:
30:16:a6:57:d0:ca:d9:f0:32:ec:59:c7:b9:96:ea:66:ab:67:
ca:c2:47:3b:38:c7:e3:93:c7:51:29:ec:e4:9a:2d:9c:20:e2:
81:ea:43:50:38:48:9e:f4:ab:5f:56:1f:7e:17:3b:38:53:65:
ea:5d:56:b5:87:7f:ce:ff:8d:fb:06:4a:66:73:c8:4c:b1:41:
d1:64:40:46:1e:41:ed:f2:24:37:7b:da:ed:11:73:ee:2f:8a:
48:8d:a0:f7:92:10:cf:d8:b8:a8:2a:6d:43:94:7a:08:df:75:
40:55:8e:a7:36:ee:0b:12:1f:43:45:2d:ac:c2:fd:0e:b7:db:
55:6c:b1:69:ad:59:66:ac:64:62:b2:71:73:1c:98:31:9c:82:
26:46:1d:aa:84:2c:49:6c:2f:8f:24:f3:5c:84:9f:0a:d7:3b:
48:87:43:30:6a:44:3d:49:2a:49:83:8e:9a:9e:ec:b7:bb:a0:
ec:96:83:40:6c:ab:7a:0b:47:5d:33:87:00:36:ab:e6:2e:af:
32:fc:c7:d4:57:ab:b6:c1:05:84:0f:ff:87:d1:15:08:51:f4:
55:dd:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:18 2026 by rpki-client