Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer (raw, json)
Hash identifier: en2PffcWP0SDCwtta2bH8eCOUz6aJOgrJRmPu2wl36U=
Subject key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7681
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:48 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 206.209.76.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30337 (0x7681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:48 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:5a:1a:4c:14:6c:f5:63:07:e2:f7:1f:b4:
a2:51:84:65:fa:c6:80:8e:61:be:c5:25:c6:ec:c0:
7c:bd:59:f7:7b:73:1a:bd:ad:4e:26:69:0f:e4:5d:
0b:42:7f:5c:75:66:43:35:c1:01:50:82:a5:cc:1a:
e1:da:9b:07:99:81:1c:49:ba:bb:8c:83:37:fe:9c:
8a:64:74:b4:25:f6:90:11:b5:30:89:d5:93:8f:7d:
4b:37:0b:65:06:34:79:e2:93:08:53:ac:02:f3:f7:
ea:84:5f:44:57:bf:95:07:95:21:52:30:84:99:51:
e9:29:22:c2:f5:6e:f9:78:33:d2:34:91:0d:04:15:
2c:2c:c3:67:0b:18:1d:21:9b:47:c7:a8:a2:c9:e8:
50:42:9e:37:32:69:2c:dd:00:2b:b0:fc:5c:fd:8d:
1c:6d:7f:69:2c:87:09:68:2c:6d:ac:49:a6:ee:b2:
02:88:b3:87:e9:a7:f1:fb:81:1e:09:ee:5c:83:b6:
56:1c:a1:95:ee:05:df:5a:d2:45:c6:4b:e9:98:13:
b7:01:83:7d:c1:89:7e:6d:7c:92:b3:56:6a:0b:48:
e8:c9:3c:b1:89:bc:61:8e:95:7a:7f:3a:76:99:b4:
48:94:21:ad:f1:db:e3:0f:e7:61:de:e6:bb:e4:8a:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
206.209.76.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:47:29:7f:a0:96:94:46:b7:88:16:b6:bf:c3:54:1c:ca:34:
7b:e6:25:49:03:79:9a:6b:57:05:3c:68:e8:97:ec:b3:40:3d:
8e:7e:14:81:fd:26:fb:7d:08:52:1d:68:22:c4:83:4f:90:5f:
b0:70:fb:ca:ab:13:3f:27:3b:c8:b0:6b:af:4b:0c:e8:e2:1b:
d3:78:90:f8:d0:72:dc:7a:74:df:21:2c:83:0a:d5:96:15:45:
60:58:1a:e9:23:b1:cb:12:e0:4b:f5:d4:6e:54:3f:bb:a6:8b:
7d:c5:0a:4f:a1:4e:dd:90:76:d2:d6:3c:bd:dc:3e:17:e7:c4:
3f:32:e0:04:8b:e3:6a:b8:13:ee:ef:d4:d5:dc:ed:0b:cc:01:
b3:55:ba:20:a9:dc:c3:20:19:d1:7d:45:c3:ca:ad:31:cb:1d:
79:a8:4b:c4:94:be:55:98:b9:78:0e:d8:a8:51:f4:ec:28:f8:
61:5d:06:9c:e9:c7:9b:9b:d5:47:48:71:53:c0:2f:91:1c:72:
8c:d2:27:9b:6e:fc:6c:f9:af:8a:77:0a:a1:9e:9c:dc:83:74:
bb:b6:3d:4a:f4:56:30:e3:4c:02:3d:76:c7:5e:b6:ef:35:e9:
22:5c:8d:8b:cd:da:e1:da:02:ab:b8:d7:60:31:10:07:e0:26:
bb:0f:9d:ac
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1NjQ4WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGNTlBNjExMC8GA1UEBRMoRTI1RkNEOUI3NzI1ODUzOTQyNzkxQTYy
RDQ3NUVDRkVEN0MwM0Y2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALb0WhpMFGz1Ywfi9x+0olGEZfrGgI5hvsUlxuzAfL1Z93tzGr2tTiZpD+RdC0J/
XHVmQzXBAVCCpcwa4dqbB5mBHEm6u4yDN/6cimR0tCX2kBG1MInVk499SzcLZQY0
eeKTCFOsAvP36oRfRFe/lQeVIVIwhJlR6SkiwvVu+Xgz0jSRDQQVLCzDZwsYHSGb
R8eoosnoUEKeNzJpLN0AK7D8XP2NHG1/aSyHCWgsbaxJpu6yAoizh+mn8fuBHgnu
XIO2Vhyhle4F31rSRcZL6ZgTtwGDfcGJfm18krNWagtI6Mk8sYm8YY6Ven86dpm0
SJQhrfHb4w/nYd7mu+SK8DcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTiX82bdyWF
OUJ5GmLUdez+18A/ZDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU5QTYvRTRFREFDMThDQjFBMTFFQTg3Q0Q1NTQ0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY1OUE2L0U0RURBQzE4Q0IxQTExRUE4N0NENTU0NEM0RjlBRTAyLzRsX05tM2Ns
aFRsQ2VScGkxSFhzX3RmQVAyUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAs7RTDANBgkqhkiG9w0BAQsFAAOCAQEAsEcpf6CWlEa3iBa2v8NU
HMo0e+YlSQN5mmtXBTxo6Jfss0A9jn4Ugf0m+30IUh1oIsSDT5BfsHD7yqsTPyc7
yLBrr0sM6OIb03iQ+NBy3Hp03yEsgwrVlhVFYFga6SOxyxLgS/XUblQ/u6aLfcUK
T6FO3ZB20tY8vdw+F+fEPzLgBIvjargT7u/U1dztC8wBs1W6IKncwyAZ0X1Fw8qt
McsdeahLxJS+VZi5eA7YqFH07Cj4YV0GnOnHm5vVR0hxU8AvkRxyjNInm278bPmv
incKoZ6c3IN0u7Y9SvRWMONMAj12x1627zXpIlyNi83a4doCq7jXYDEQB+Amuw+d
rA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:14 2026 by rpki-client