Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer (raw, json)
Hash identifier: vatqmpaYhHl+3tHa2/wDoskjs5RABbCz1kcTE9d8r78=
Subject key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:21 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.120.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30115 (0x75a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:21 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:b0:64:ac:6b:0a:62:e1:37:18:03:4a:53:
80:0a:34:76:72:60:c2:19:dc:d2:db:bc:fa:bd:fa:
89:1f:69:c3:45:9d:c4:c4:f8:2c:d5:27:fd:54:cb:
c9:23:d3:b9:46:74:2f:17:37:e4:e3:46:cf:2a:92:
65:a4:67:d9:d4:70:3c:da:e7:ba:58:c9:ce:ce:37:
15:aa:9c:9e:93:6e:ea:39:c2:9e:1f:a6:b2:5c:19:
e2:bc:9c:02:d4:ed:10:34:27:0b:87:bd:a6:f9:d0:
6e:d6:bf:bb:33:f5:17:e8:36:59:c9:48:69:c4:19:
63:cf:b4:a2:61:6e:dc:6e:dd:8b:13:66:1a:53:9c:
15:1a:d4:04:40:11:fc:42:c1:9a:39:43:8a:a2:a5:
bb:98:72:02:6e:a5:4a:fe:53:fa:9c:71:43:75:b5:
45:d4:03:e4:e7:7b:ed:db:83:ee:80:e3:f9:08:e5:
47:2d:67:e1:a4:37:7f:62:ee:75:69:c4:20:71:0a:
98:a9:56:57:5c:90:92:17:14:4e:15:9b:e1:ba:ef:
e3:9b:76:86:6e:98:9d:26:83:6b:b7:59:46:9c:e8:
d1:44:e7:87:9b:da:36:a5:b6:ec:57:69:70:e4:31:
42:d4:ab:59:95:c8:3f:6f:10:62:db:70:76:97:71:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
39:b5:36:a3:59:ce:bb:9d:08:fc:ae:9f:00:f8:d6:ad:8d:e2:
d5:07:3c:15:00:a0:d8:0f:01:2b:eb:93:e1:cb:7e:cd:b3:8e:
cd:bd:07:a3:fd:6e:23:dc:24:0b:5f:51:a7:eb:71:2e:73:3f:
74:1d:a9:e2:b8:5f:fb:39:29:4f:4d:d4:28:dd:07:60:5e:8d:
40:f9:e3:c8:a5:27:34:39:43:c3:4f:07:11:06:42:5a:bf:36:
1f:60:02:62:94:f3:27:40:0a:6d:da:81:17:60:ac:6c:7c:ce:
88:b9:90:3f:af:8f:6a:32:2d:77:32:8e:fe:e1:32:c7:14:02:
6c:7f:28:fa:aa:71:78:2e:35:8c:b2:71:00:f2:7f:94:1d:1a:
85:2e:cb:55:78:32:2f:d4:28:5f:93:9b:d1:e1:59:30:a7:be:
55:b7:ba:8c:2c:e7:55:b1:d1:ba:da:e3:f9:f5:06:9e:cd:fd:
49:f2:3f:92:57:7b:93:c1:f6:a3:6e:5e:d7:54:8d:a4:0e:e3:
e2:5f:02:1f:6f:33:74:10:ee:34:48:e8:97:60:42:43:a3:e0:
b3:6e:fe:d9:c5:44:35:8b:dc:57:3d:96:32:2a:a4:2d:f0:ef:
bb:7b:98:7d:82:d2:f9:12:bc:d1:8c:1b:59:fe:21:41:42:1f:
1d:56:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:48 2026 by rpki-client