Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
File: ALcq1TM86q4aWFyCgInERVmZY_I.cer (raw, json)
Hash identifier: Sk/ZtuQIfM5Vb3Gjs4fpybtzb455QHt/pY3OQf0QRB0=
Subject key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 74B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:47:07 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.48.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29872 (0x74b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:47:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:cb:81:83:c2:43:34:2d:de:8c:18:d4:32:
80:3a:de:65:6b:41:c6:5c:f4:28:4a:ea:41:d1:11:
43:ea:4b:1a:cd:21:e0:74:43:9e:96:97:0c:e8:9f:
bd:90:34:37:bf:5b:5d:49:59:af:a9:73:b1:81:c5:
80:97:7e:b3:71:c5:48:78:92:77:1f:74:52:58:83:
4b:7f:9c:7e:18:2b:50:7c:50:8c:b0:ea:49:f1:e3:
47:f0:d8:df:9e:53:7f:9e:98:59:ef:4e:32:3c:ac:
b9:5a:8b:51:93:09:d7:03:58:29:91:1d:d0:76:4f:
96:9f:62:1c:b9:fc:64:67:79:51:6d:8a:c1:53:13:
76:2e:38:cd:fa:6b:72:62:14:fc:7b:87:3f:88:f3:
0e:ca:3b:c8:b1:4a:2c:de:6e:2b:3c:67:2d:a6:32:
2a:f5:0c:89:07:13:7c:cb:4b:cc:d2:fb:4d:b7:49:
ed:b2:18:ff:a9:5f:54:79:32:6d:ba:3f:63:d7:16:
d6:12:c8:df:00:d2:b6:f9:c7:4f:36:3d:fa:f7:db:
5c:45:d9:fa:fe:22:05:a8:1d:9d:db:ab:bd:81:45:
40:42:82:cc:16:76:90:64:db:c6:16:b1:3f:10:3d:
12:0c:23:ad:8f:bd:78:bc:6d:31:71:13:24:32:d5:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:f7:f0:aa:3a:9f:ee:f1:a0:c2:af:40:70:6c:91:9b:50:ea:
96:81:5e:fa:e1:12:98:a4:7f:0c:a0:90:13:d5:38:ac:0b:36:
b0:a5:4f:47:6d:f3:a5:12:4a:8a:c7:94:8c:f4:7d:ba:2f:dc:
d7:25:65:88:52:d0:0d:fe:39:56:24:e2:55:68:03:32:94:5c:
0c:53:86:8d:c3:c7:f5:b6:7c:bf:90:fd:f0:af:0c:47:90:ff:
e8:6c:28:8c:cf:9f:8d:7d:b3:32:5f:38:57:96:00:c2:21:b5:
dd:d7:0a:b1:61:53:9b:52:fd:46:87:0d:fc:a6:82:93:f6:81:
cf:c2:fe:7a:37:d1:95:a1:5f:f1:25:a8:5b:36:52:10:d6:95:
c2:e9:ce:88:c8:8c:3e:7a:76:50:0a:2a:c4:c6:a7:92:ba:76:
e1:3b:f4:f9:1a:4c:bb:3e:dc:32:5f:79:b3:0f:26:eb:b8:94:
8f:d6:0d:ff:3f:49:ec:60:83:18:a4:cc:ea:d6:d0:f5:20:ef:
59:ef:b0:f6:45:9e:05:f8:b1:a3:f5:7f:3f:a2:57:8f:a1:31:
99:d6:07:f7:0b:4d:1c:a2:39:05:6f:02:44:50:6d:fa:46:99:
6a:ee:c6:95:76:8b:c5:b9:20:8d:9c:ed:38:c4:81:c5:f7:16:
49:1b:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:30 2026 by rpki-client