Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
File: 7KeHdUGmkz3VBhpsggg9O4ORXIU.cer (raw, json)
Hash identifier: 8qpU1V4OjhD/fJOWl8NmE3gJ9YmuUe98WE95WFSTVB4=
Subject key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7947
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Apr 2026 12:58:47 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.85.112.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31047 (0x7947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 1 12:58:47 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:38:78:ee:49:09:c6:7b:1b:6b:29:05:05:
f6:b9:1c:ed:e4:db:04:39:bd:9b:85:d2:f4:79:e8:
bc:59:2a:90:a0:a8:30:bf:05:8e:d7:79:83:5a:77:
61:fd:c3:ac:e5:b7:c2:53:85:27:a0:ba:50:82:9c:
6a:e6:21:88:18:8e:fb:85:8a:8b:4a:7f:58:fd:51:
61:8d:d4:18:28:26:e1:f7:b7:54:c3:7c:3a:73:fe:
63:9b:4a:7f:5d:98:fe:15:d8:8f:2c:19:6e:61:8c:
9c:a5:59:a8:a6:d7:74:d5:3a:e9:bf:bf:a7:ce:22:
1f:c7:51:05:7b:77:85:7c:00:2b:44:4c:c9:49:04:
c6:c9:c6:46:0e:92:4d:62:59:44:09:ea:f9:a3:f0:
33:ff:89:6f:31:fc:9d:eb:09:9f:f3:1a:7b:f6:02:
85:d2:c2:ee:2d:ae:6c:26:fa:60:a6:45:36:7d:00:
43:4c:dd:1e:e0:d6:b9:9d:ae:c4:61:da:f2:53:ff:
f4:a3:ce:63:e3:7c:7d:a4:54:8e:5b:cc:44:48:23:
ef:c4:ff:f4:6e:ec:a4:5c:9e:1a:70:0d:24:c0:2f:
b8:3d:be:f2:c5:a7:67:da:61:51:6e:91:9c:0d:ec:
75:6a:64:2e:01:6a:5b:bd:be:fe:a8:6a:0e:65:47:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.85.112.0/20
Signature Algorithm: sha256WithRSAEncryption
15:d2:09:39:58:db:37:c8:ba:d4:41:3d:29:4f:25:53:80:1a:
ae:b4:a8:3f:fa:35:50:6a:8b:f6:b4:e6:c8:d5:34:4b:90:80:
28:25:72:87:1a:84:1a:64:3a:ff:bd:0e:e9:f2:83:79:1c:60:
b3:db:91:ce:da:c9:85:64:ba:50:01:6b:f6:b3:1c:dd:b2:5e:
8b:c8:e5:cc:01:05:47:49:67:bd:da:7b:bf:17:8c:8e:2b:b1:
09:a8:1a:08:31:62:ed:a5:d2:7a:c0:2d:8d:cb:d0:7e:29:0e:
00:d3:dd:5e:da:74:c9:55:de:77:f8:a0:77:07:a8:46:54:11:
34:8b:aa:ff:1d:a3:13:07:da:5f:6f:76:31:71:dc:e2:5b:ca:
1e:91:2e:34:a2:bd:14:6e:43:f9:23:30:5e:57:9c:6f:36:64:
fc:ab:b6:54:1c:d8:15:68:30:b3:10:5a:d5:d4:81:d7:6e:25:
f5:10:60:bf:8c:fe:ef:d2:ac:f8:ea:5b:56:47:54:28:61:9c:
5e:b9:48:43:19:ba:30:b9:fc:27:07:8b:86:56:71:e3:c2:20:
33:16:87:55:9a:a1:8c:18:f5:14:e1:bf:b1:4a:62:1d:ed:c9:
5b:84:14:cc:88:a8:5d:8a:0b:e8:7c:f6:c6:90:d7:33:63:f7:
18:9a:3e:7a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNDAxMTI1ODQ3WhcNMjcwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0MjEyNzExMC8GA1UEBRMoRUNBNzg3NzU0MUE2OTMzREQ1MDYxQTZD
ODIwODNEM0I4MzkxNUM4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKlWOHjuSQnGextrKQUF9rkc7eTbBDm9m4XS9HnovFkqkKCoML8Fjtd5g1p3Yf3D
rOW3wlOFJ6C6UIKcauYhiBiO+4WKi0p/WP1RYY3UGCgm4fe3VMN8OnP+Y5tKf12Y
/hXYjywZbmGMnKVZqKbXdNU66b+/p84iH8dRBXt3hXwAK0RMyUkExsnGRg6STWJZ
RAnq+aPwM/+JbzH8nesJn/Mae/YChdLC7i2ubCb6YKZFNn0AQ0zdHuDWuZ2uxGHa
8lP/9KPOY+N8faRUjlvMREgj78T/9G7spFyeGnANJMAvuD2+8sWnZ9phUW6RnA3s
dWpkLgFqW72+/qhqDmVHjLMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTsp4d1QaaT
PdUGGmyCCD07g5FchTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDIxMjcvQzQ4RkE4RkFENzQ4MTFGMEJBMUIwRDlFNkJEMzY0MUQvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQyMTI3L0M0OEZBOEZBRDc0ODExRjBCQTFCMEQ5RTZCRDM2NDFELzdLZUhkVUdt
a3ozVkJocHNnZ2c5TzRPUlhJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBJ1VcDANBgkqhkiG9w0BAQsFAAOCAQEAFdIJOVjbN8i61EE9KU8l
U4AarrSoP/o1UGqL9rTmyNU0S5CAKCVyhxqEGmQ6/70O6fKDeRxgs9uRztrJhWS6
UAFr9rMc3bJei8jlzAEFR0lnvdp7vxeMjiuxCagaCDFi7aXSesAtjcvQfikOANPd
Xtp0yVXed/igdweoRlQRNIuq/x2jEwfaX292MXHc4lvKHpEuNKK9FG5D+SMwXlec
bzZk/Ku2VBzYFWgwsxBa1dSB124l9RBgv4z+79Ks+OpbVkdUKGGcXrlIQxm6MLn8
JweLhlZx48IgMxaHVZqhjBj1FOG/sUpiHe3JW4QUzIioXYoL6Hz2xpDXM2P3GJo+
eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:49:03 2026 by rpki-client