Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
File: 7w5JMvxot1LjQokiqT5mq-MfNDE.cer (raw, json)
Hash identifier: ZaVmxQlasZJLzpCkI0uTh5a+HPRpuHqd9rKFaq7OX24=
Subject key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78FF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Mar 2026 04:31:24 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.20.102.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30975 (0x78ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 27 04:31:24 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:74:a8:cc:06:55:25:45:a6:dd:e1:9e:f6:
d1:cd:fd:c5:54:1b:36:10:3c:d9:ab:1e:d8:f7:49:
6e:84:4b:29:c6:82:b7:db:d0:83:99:f9:f2:dd:52:
38:89:15:7b:02:b5:37:b9:a6:a0:8a:b4:99:d0:58:
72:06:38:aa:f1:73:38:73:b1:c4:7d:75:40:b7:77:
73:73:a8:3d:8f:e0:6d:a6:cb:cb:20:ab:7b:65:05:
5c:e3:a0:0e:8f:f4:df:87:59:28:81:b9:c5:89:59:
16:6c:b4:61:50:74:ed:c1:5c:35:34:30:f0:ff:9d:
1f:ac:02:7c:fc:f1:48:3a:1b:e2:ed:84:a9:f5:b7:
4e:3a:ee:03:ae:bc:d1:c0:0d:a4:d9:b0:88:66:d9:
45:7e:53:8e:81:71:97:95:95:74:35:4a:30:a8:12:
8d:40:81:ad:08:f6:5d:ae:78:c4:a7:88:57:17:6f:
b3:8f:30:db:aa:36:60:27:23:0b:a6:71:b5:ad:a1:
9f:2d:c4:57:70:c5:b8:88:d1:65:55:4a:5c:c1:53:
a8:4c:f1:00:b9:aa:f2:eb:99:8f:ae:16:88:20:22:
fc:6a:50:ad:6f:36:c7:02:7c:2b:f9:60:51:fc:3e:
0e:c5:9b:ba:1e:f0:91:f6:e7:a8:6c:92:11:4a:b5:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.102.0/23
Signature Algorithm: sha256WithRSAEncryption
91:2c:f2:96:a3:1d:37:38:79:86:2f:b6:00:61:16:5b:6e:39:
fb:50:1e:fd:86:63:f3:bd:a8:cd:f8:0e:82:3e:c1:83:ae:01:
ef:0f:ea:b2:2f:53:b6:07:97:15:63:05:60:04:f0:34:7a:06:
a0:8f:e7:25:a6:72:52:1c:dc:c4:38:21:e3:73:5f:c0:49:45:
6b:ce:56:c3:54:fc:a1:c7:8e:70:90:49:b5:b8:f7:2b:3e:57:
f2:7d:de:6c:3e:0a:4a:4a:cc:34:81:66:e4:bc:73:43:58:15:
ee:41:8a:b3:52:5f:0c:71:56:50:ef:2f:d6:01:eb:50:21:00:
d3:56:52:6a:43:ff:cc:db:2e:ef:52:a8:aa:f2:02:11:58:c3:
50:b9:24:f5:22:7b:c3:0e:df:7a:fc:6e:22:b9:a4:95:09:58:
cc:e0:08:f0:c4:db:84:5a:a9:7b:49:ff:4d:00:90:66:57:c8:
cd:a0:37:09:a1:6b:5f:25:41:64:26:20:87:ed:af:cd:e6:63:
0c:99:63:db:48:cb:cc:fe:f5:b4:05:63:84:1c:9e:9d:99:e1:
c3:0f:56:8d:5d:4f:1d:a5:63:dc:f9:8b:42:4a:bd:a3:c9:d0:
ad:89:3b:8e:14:9b:f0:73:89:44:16:2a:5e:17:a9:c8:5c:a1:
bf:1e:8d:fc
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMzI3MDQzMTI0WhcNMjcwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCNEIzMzExMC8GA1UEBRMoRUYwRTQ5MzJGQzY4Qjc1MkUzNDI4OTIy
QTkzRTY2QUJFMzFGMzQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AO4QdKjMBlUlRabd4Z720c39xVQbNhA82ase2PdJboRLKcaCt9vQg5n58t1SOIkV
ewK1N7mmoIq0mdBYcgY4qvFzOHOxxH11QLd3c3OoPY/gbabLyyCre2UFXOOgDo/0
34dZKIG5xYlZFmy0YVB07cFcNTQw8P+dH6wCfPzxSDob4u2EqfW3TjruA6680cAN
pNmwiGbZRX5TjoFxl5WVdDVKMKgSjUCBrQj2Xa54xKeIVxdvs48w26o2YCcjC6Zx
ta2hny3EV3DFuIjRZVVKXMFTqEzxALmq8uuZj64WiCAi/GpQrW82xwJ8K/lgUfw+
DsWbuh7wkfbnqGySEUq1hKUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTvDkky/Gi3
UuNCiSKpPmar4x80MTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjRCMzMvMUFDRTdEMDQyMjFFMTFFRjkzNDRBMzA5QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI0QjMzLzFBQ0U3RDA0MjIxRTExRUY5MzQ0QTMwOUM0RjlBRTAyLzd3NUpNdnhv
dDFMalFva2lxVDVtcS1NZk5ERS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0UZjANBgkqhkiG9w0BAQsFAAOCAQEAkSzylqMdNzh5hi+2AGEW
W245+1Ae/YZj872ozfgOgj7Bg64B7w/qsi9TtgeXFWMFYATwNHoGoI/nJaZyUhzc
xDgh43NfwElFa85Ww1T8oceOcJBJtbj3Kz5X8n3ebD4KSkrMNIFm5LxzQ1gV7kGK
s1JfDHFWUO8v1gHrUCEA01ZSakP/zNsu71KoqvICEVjDULkk9SJ7ww7fevxuIrmk
lQlYzOAI8MTbhFqpe0n/TQCQZlfIzaA3CaFrXyVBZCYgh+2vzeZjDJlj20jLzP71
tAVjhByenZnhww9WjV1PHaVj3PmLQkq9o8nQrYk7jhSb8HOJRBYqXhepyFyhvx6N
/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:32 2026 by rpki-client