Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
File: Abso_b4VWoZixe5oDP3wyY1OvR0.cer (raw, json)
Hash identifier: 57mUlCeLmIY4XMzZuvClqvBDg7gzpKKr/hkkN4pd/Kc=
Subject key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7546
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:21 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30022 (0x7546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:21 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:1f:3f:1f:2f:dd:f9:0d:c3:37:1a:0a:a1:
20:78:3f:44:49:08:ba:4f:bf:6c:86:cf:f1:b0:10:
56:04:fb:29:59:fb:26:7b:3f:a6:9e:35:11:e2:4d:
01:bb:91:2b:40:67:fe:71:ab:be:3e:f9:a4:aa:97:
76:d8:dd:c0:1e:bd:97:fb:45:00:70:a9:e8:9f:8f:
f2:86:85:2a:a0:e7:2c:7f:24:e7:4b:2d:cc:0c:48:
35:6c:2f:d8:7d:71:81:79:5c:01:0f:ea:99:05:ff:
c0:d8:39:29:7c:7c:0e:94:e5:35:e4:45:b2:dd:e8:
27:3b:26:02:cf:30:09:1e:3c:7a:6c:3b:ce:b8:ef:
69:83:8d:31:b3:df:f6:85:11:49:c0:1d:d9:4b:12:
03:05:b6:0f:8b:1b:fe:29:52:75:50:e7:f7:14:cf:
dc:d3:d4:b8:b2:a8:e4:29:71:be:2b:ca:88:4c:79:
1d:85:50:5d:8c:e6:cc:e0:86:d6:6c:f2:0f:6f:1a:
f1:ad:ae:7c:f7:79:d6:40:6d:bd:cd:af:28:60:42:
6a:9f:4a:8a:4a:8a:97:7a:44:f0:87:fe:5e:55:b1:
fb:8b:c0:c3:2f:83:5a:89:f3:29:9b:74:16:4b:d0:
9d:76:f8:6a:66:a7:e6:fa:b6:44:55:53:62:fb:fd:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.128.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:07:65:4a:83:f6:c1:aa:6d:23:1a:3e:93:d2:31:e2:1d:8d:
f4:7f:5f:d2:85:3a:63:ce:1b:24:2a:9d:16:9a:98:7a:d9:e1:
dd:0c:75:e7:e3:39:5f:1e:9b:01:a6:7b:31:4a:28:4d:8d:79:
c8:bb:87:30:9b:ea:26:4e:e8:31:de:79:a3:0a:ed:83:a1:bb:
52:ca:ad:30:90:fc:cf:e0:59:87:c5:03:26:39:be:a5:50:97:
69:1e:21:d5:9d:a9:aa:4a:09:50:26:19:01:23:3a:0a:c2:d2:
b2:eb:4d:64:c6:c9:e4:10:47:2f:1a:03:3a:34:86:a5:59:aa:
b5:29:f9:b7:32:0e:5b:56:83:d7:c3:8f:6a:69:50:a6:ce:12:
5b:8f:a6:f0:58:26:8f:65:db:b7:ec:66:f9:23:c9:74:b7:96:
22:df:2a:23:2b:c3:c9:15:49:a5:a0:17:d9:c3:f8:f6:f3:3f:
1e:6c:26:68:18:95:a7:1a:fc:de:55:4d:d6:b2:1e:de:dc:f6:
1a:8c:69:ad:22:09:94:72:b1:aa:2f:9b:aa:e1:9b:c0:c1:eb:
0d:5c:a6:dc:96:99:ca:6e:b9:c9:ef:67:93:be:7e:3c:67:65:
63:9d:3c:a8:ac:9a:d1:f4:25:5b:ff:a4:13:68:b1:fb:c4:ea:
85:55:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:40 2026 by rpki-client