Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer
File: 7BWoR694TfECWIIbq5lKyCA1ld8.cer (raw, json)
Hash identifier: O0JjjuRNj03h9lL0IWpYLiIbtXRijNIwXLzFWaxNYQY=
Subject key identifier: EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7706
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:32 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 192.148.221.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30470 (0x7706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:32 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A917B218, serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:9d:b0:bf:6e:ed:ae:38:dd:8f:3b:20:43:
d8:0d:b8:ee:40:7a:c9:27:46:2b:e9:56:6e:4b:40:
f7:2a:99:3b:fc:2a:b7:a3:69:a0:b4:82:98:66:1b:
dc:f9:25:5b:ea:2c:82:77:b4:3c:f2:1f:e3:dc:ab:
c6:03:f1:86:ec:90:30:52:03:04:b5:89:c2:ce:40:
a6:a8:e5:7c:5a:6c:9c:88:a8:a9:32:b2:76:a6:6d:
7a:75:b2:d3:de:d0:e4:5c:cc:9b:fa:26:12:9c:92:
87:d9:cb:13:a9:f9:05:19:2e:d1:c2:37:1b:d2:5b:
7a:e5:23:4b:39:a5:cc:d0:b0:bb:fc:9d:af:45:c0:
75:b0:d6:33:76:66:22:32:58:c4:4e:ef:9a:6e:9d:
13:10:89:4c:60:71:ff:56:16:57:50:62:86:63:b4:
58:a7:d2:29:44:1d:aa:63:ac:8b:d6:38:6c:21:60:
9a:02:6d:17:3a:f9:e8:06:d4:76:00:dc:38:ee:07:
18:00:f2:cd:f0:40:b6:7b:9a:ce:e3:1b:5e:3a:ea:
09:d2:1e:0b:ec:70:15:50:6f:79:51:4c:0d:dd:d9:
df:00:65:9e:ec:3c:bd:32:68:04:ee:0c:aa:e6:b8:
25:63:22:45:2a:e1:ae:f1:0b:5a:09:28:e9:9a:f2:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.148.221.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b3:fd:1b:63:b4:24:7b:94:d2:ea:a9:87:3d:6f:64:c1:cd:
9d:31:f0:f2:6a:c4:db:a6:d5:13:32:67:85:94:ef:40:19:6f:
8e:64:e8:5a:da:a3:b5:cb:1f:28:65:e1:ab:b1:62:62:34:9c:
fb:68:e3:0e:db:50:6a:8d:78:05:7c:c9:b7:26:c3:ab:e2:4d:
10:b0:1b:1a:14:f3:85:a7:5b:f8:ce:36:16:b0:87:14:1c:f3:
b0:34:54:89:ce:4f:75:fc:1b:6f:1d:13:c1:70:c4:34:81:1e:
f4:63:80:52:29:6e:72:38:58:22:96:67:54:05:84:62:a3:60:
cf:a4:c6:b3:47:db:9b:67:03:50:ca:9e:75:28:71:67:3d:c3:
da:78:33:2a:ee:5d:b6:66:62:22:0c:35:ba:9c:6e:17:5f:d8:
e3:0c:46:46:10:45:3c:34:02:b1:ef:dc:24:35:d5:8f:e8:c8:
75:7e:44:12:18:45:6a:ad:65:e3:b1:6f:52:f0:38:f9:ec:ea:
cf:6e:a8:3a:14:2d:37:be:76:00:00:a7:8f:41:e1:34:f5:0f:
d0:f4:f8:96:f6:81:3d:a6:fe:15:2f:e9:0c:4c:58:33:27:41:
97:14:11:f8:1a:97:9f:81:bc:a0:f5:df:d6:39:be:25:57:20:
17:e5:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:32:19 2026 by rpki-client