Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
File: 7DwKarkc4TMW0oQzDDgovv4qNBM.cer (raw, json)
Hash identifier: 4ozLcCjIudmLaP7BRuRCkWWmA2ecEehK4z96hz83jNQ=
Subject key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7671
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:28 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.152.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30321 (0x7671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:28 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:4d:e5:5a:43:27:71:f0:57:ab:6d:df:93:
84:eb:38:d9:fa:05:a4:6f:2e:42:f3:35:22:e8:83:
7b:cb:43:d4:a5:a1:71:eb:3e:83:48:3f:b1:0c:35:
aa:56:51:96:1d:01:38:0b:a9:e7:75:78:e1:87:0a:
b9:5e:bc:20:06:16:34:c6:80:c1:f6:5f:74:0e:07:
f5:8d:69:ed:9e:9b:ab:2e:7d:30:e5:65:bf:62:52:
13:ca:75:15:d0:4f:83:cc:8d:49:ee:f0:c7:0f:07:
64:da:f0:a1:df:87:8b:9f:a0:a6:94:97:de:42:81:
fb:41:42:15:d2:ab:44:a5:50:10:dc:5f:25:a8:4e:
bd:33:e1:3a:43:9c:8b:2d:46:80:b4:a9:e1:78:27:
db:47:23:58:23:e6:31:bf:7b:8e:0c:94:e3:1a:8b:
bf:6a:a5:9f:7c:77:65:d6:38:3b:4f:e9:dd:4a:d9:
45:9d:53:00:07:c1:5c:13:0e:6c:b6:fb:0c:ad:c9:
72:cf:35:46:df:5d:71:e9:23:41:c0:64:f4:eb:29:
0e:00:12:bc:5c:8f:c7:59:e3:b6:b0:40:80:32:2a:
f6:55:9d:04:2f:ea:20:11:7c:b5:e8:04:5b:8e:40:
8e:db:0d:e1:7c:ca:57:11:00:c0:f5:57:79:d6:70:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.152.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f0:c8:c2:9e:be:53:09:04:58:b6:aa:15:e3:74:55:65:19:
a6:4b:30:76:dd:b8:b6:df:5a:bb:20:e2:15:75:7c:3b:5e:ea:
3d:10:cd:b0:7a:55:d1:be:fd:92:3c:b8:68:71:53:66:9d:5b:
31:47:24:e3:43:74:7c:2c:d2:63:8d:cf:b9:1d:e4:0f:3e:65:
f4:81:1f:a0:b0:75:f4:68:5c:e6:c3:c2:91:a4:5b:66:19:b9:
26:78:1a:b3:12:3b:ca:c3:14:f0:3e:db:5e:08:c3:02:0c:2e:
dd:3c:e2:f0:5f:cd:4c:0b:a5:2a:c5:d9:8c:16:6a:e2:e2:5f:
59:a0:95:53:7f:12:36:cd:45:0f:7e:9d:ef:25:a2:f7:97:6d:
2a:72:76:7e:2e:7e:bb:cc:a2:7b:ef:ff:ce:9b:fc:4d:a0:77:
cc:c2:af:23:11:94:48:5d:40:89:31:51:11:0e:23:94:72:31:
39:66:a4:c5:8e:fe:0d:8e:c2:2e:20:ee:51:22:ac:96:c7:4a:
6e:2b:c5:57:5b:a9:25:00:7d:a8:b5:72:a7:74:d3:27:a1:24:
6a:a5:3e:ec:28:be:42:e7:df:e7:b9:15:fb:f2:b3:15:0e:50:
62:e1:1a:e9:14:62:17:2b:1a:9d:8d:f0:0a:72:8c:5b:69:40:
c8:61:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:24 2026 by rpki-client