Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer (raw, json)
Hash identifier: pZgTnA3INFS4XN6PYMg8ervh58GV/yrfcJnC6kbNHY0=
Subject key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:47 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.88.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30383 (0x76af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:08:57:a6:58:9e:f7:6e:80:1e:d9:82:6a:
2a:63:66:3b:96:86:0e:7d:26:17:f1:d5:40:b3:d3:
5c:2f:98:6c:dc:7e:6f:ba:69:d2:ab:f6:5b:1d:a6:
ee:16:66:68:64:84:6a:b6:3e:0b:49:79:bd:cd:a9:
fe:70:a5:4a:4d:0f:20:9a:0b:11:30:35:08:ca:00:
d8:24:49:23:04:e0:7f:02:51:f7:d8:e5:50:3a:44:
78:f8:65:a5:18:2f:ec:c6:8d:0f:e9:0a:87:23:2f:
20:f6:87:b5:27:25:23:7c:67:a6:fe:cd:fa:77:55:
ab:ae:b3:2b:06:19:84:cf:3c:b6:7a:34:ff:4b:cd:
3b:64:2a:d3:43:e4:67:65:d5:f3:aa:bd:a4:0a:f8:
fb:4d:a5:bb:d2:e1:19:ad:c2:75:32:fe:bf:0d:6f:
ab:a6:54:3a:5e:d3:74:41:0e:ec:54:29:fc:42:ed:
38:d8:e5:03:71:84:a8:e3:7d:c7:57:13:ca:6e:93:
56:16:1e:f3:b3:bf:fb:b2:a9:5e:5e:19:6d:4b:71:
15:9c:15:9d:fd:ed:4e:83:ef:15:69:e6:0f:e0:57:
37:6d:49:b9:2b:d3:47:4f:02:fd:6c:69:4f:6e:3d:
4d:3c:4d:e8:92:c8:05:b6:ee:15:78:0a:41:17:bb:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.88.0/23
Signature Algorithm: sha256WithRSAEncryption
01:33:6a:74:df:7c:cd:52:54:72:23:43:b3:c3:c1:ae:71:4d:
63:2a:2d:37:fa:a7:bb:30:d2:c3:3d:7e:f2:9a:9c:49:a8:c4:
ad:9b:c7:0f:7b:1c:10:d5:40:4d:40:bb:2b:9e:08:4c:ac:b3:
11:d3:f6:d7:0d:b0:ca:61:46:db:ca:8c:d9:75:3d:09:44:e0:
ec:ac:84:42:ef:ca:e9:78:78:e8:34:40:2d:ab:13:98:2c:68:
01:96:a3:fe:fc:22:7b:fa:0c:70:02:21:74:63:a0:cf:19:62:
99:95:50:9a:46:e4:41:c5:d4:e6:a1:a1:3e:31:05:e7:57:5d:
aa:04:e5:41:fc:a7:33:ef:ed:d5:1c:20:47:35:25:3c:81:4c:
cd:a2:fd:c7:82:fc:2d:0c:84:56:05:83:80:20:83:73:f4:3e:
b6:9a:71:c4:b5:68:b7:37:57:65:07:89:38:b0:61:ab:34:ab:
09:91:d3:88:29:8f:2a:de:67:74:04:32:13:fe:54:9d:8c:54:
eb:dc:dc:34:f0:61:7d:48:f7:af:3e:c1:22:05:e9:98:3d:bd:
49:66:5f:42:94:0a:48:3c:a4:00:6c:aa:d2:dc:94:8d:a8:6e:
17:96:de:1a:04:8e:14:1d:77:fb:cf:46:42:22:6b:db:cd:d0:
64:c3:44:ff
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1NzQ3WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGNkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1
NkU0MzdCN0MyNjI2RjRCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKoWCFemWJ73boAe2YJqKmNmO5aGDn0mF/HVQLPTXC+YbNx+b7pp0qv2Wx2m7hZm
aGSEarY+C0l5vc2p/nClSk0PIJoLETA1CMoA2CRJIwTgfwJR99jlUDpEePhlpRgv
7MaND+kKhyMvIPaHtSclI3xnpv7N+ndVq66zKwYZhM88tno0/0vNO2Qq00PkZ2XV
86q9pAr4+02lu9LhGa3CdTL+vw1vq6ZUOl7TdEEO7FQp/ELtONjlA3GEqON9x1cT
ym6TVhYe87O/+7KpXl4ZbUtxFZwVnf3tToPvFWnmD+BXN21JuSvTR08C/WxpT249
TTxN6JLIBbbuFXgKQRe7ZWUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTisN+mkNLH
6sQ2NnVuQ3t8Jib0uzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjZDMTAvMEU5NDA1QkEzQjlEMTFGMDkwMUNCMjYyQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY2QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERT
eC1yRU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH4WDANBgkqhkiG9w0BAQsFAAOCAQEAATNqdN98zVJUciNDs8PB
rnFNYyotN/qnuzDSwz1+8pqcSajErZvHD3scENVATUC7K54ITKyzEdP21w2wymFG
28qM2XU9CUTg7KyEQu/K6Xh46DRALasTmCxoAZaj/vwie/oMcAIhdGOgzxlimZVQ
mkbkQcXU5qGhPjEF51ddqgTlQfynM+/t1RwgRzUlPIFMzaL9x4L8LQyEVgWDgCCD
c/Q+tppxxLVotzdXZQeJOLBhqzSrCZHTiCmPKt5ndAQyE/5UnYxU69zcNPBhfUj3
rz7BIgXpmD29SWZfQpQKSDykAGyq0tyUjahuF5beGgSOFB13+89GQiJr283QZMNE
/w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:44 2026 by rpki-client