
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
File: C7u50Awy3Cf2uMqAHgDtKYM59qM.cer (raw, json)
Hash identifier: YpsPT8mDMcMNgsqYyJ2VQKL1W+w25q9VPriIpwZBoqY=
Subject key identifier: 0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 754C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:31 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.54.0/24
IP: 161.248.37.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30028 (0x754c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:31 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A913CFCF, serialNumber=0BBBB9D00C32DC27F6B8CA801E00ED298339F6A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:58:4f:49:f9:63:8d:d4:55:49:05:ad:7c:
04:84:8c:4e:f4:7b:77:b6:61:89:e6:82:ee:d0:85:
14:17:26:0d:3a:56:b8:6c:84:71:8b:f9:e9:f1:57:
2d:45:c0:74:d2:ec:2e:bf:55:ce:73:15:ea:a1:3b:
1c:ea:46:28:fc:4a:b5:63:58:fd:66:ef:48:64:d1:
1b:ae:22:77:cf:84:5d:38:ba:d7:10:27:8e:e5:06:
ee:36:ab:bf:71:c5:bb:94:9a:44:df:ff:a5:b2:14:
43:8d:da:e4:06:40:54:cd:30:dd:be:0e:86:87:18:
55:0e:f3:eb:25:90:1f:31:52:f0:75:05:7c:7a:f1:
ed:4a:05:fa:12:7c:7f:65:90:dc:ab:a9:da:67:46:
a6:28:a9:00:11:39:8b:d6:d6:3e:2a:36:be:de:d5:
45:89:88:8f:62:c3:7c:77:97:ef:27:19:25:30:fb:
1d:2d:dc:d4:48:a5:24:a5:88:1c:76:c5:28:64:2f:
25:ef:00:0e:87:2a:39:44:57:ec:90:b5:2c:14:1f:
46:a1:bf:7a:d6:01:e7:a5:e0:e4:67:fb:71:c2:ce:
47:05:2a:de:4a:2b:38:d7:7f:e1:d2:db:c2:a2:13:
c9:2e:4d:91:7a:74:68:66:a1:2d:67:81:c3:a3:57:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.54.0/24
161.248.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:45:8a:23:af:6a:6b:ff:49:84:ae:da:2d:12:ed:30:4d:0e:
fb:7d:65:49:02:6f:78:b1:b9:85:9a:24:ba:3b:9f:35:99:18:
1c:81:f6:2c:20:28:8a:f4:c8:a5:de:91:2b:16:5d:62:44:79:
00:5f:c5:f9:4e:5a:27:05:c9:92:c1:2f:10:d4:a3:80:be:2d:
5c:da:d7:de:2e:c6:0e:aa:b2:7e:ac:0e:8e:37:f6:b2:e3:f7:
87:bf:c7:b1:e8:ad:79:86:11:69:94:7d:71:ff:85:2f:b5:ac:
eb:c9:e3:6b:e9:35:3f:91:5a:76:0a:10:c6:c5:ea:6a:7d:3c:
94:a3:53:4b:12:53:cb:4e:46:e1:05:84:e8:9c:17:24:f2:f0:
29:ed:50:8f:67:82:4e:f1:ae:17:77:98:34:8e:19:fd:c1:52:
e7:e1:0c:31:89:7b:7f:7f:dd:52:cc:a1:f7:25:c4:d6:30:87:
ea:13:73:2e:77:a4:da:0d:84:2f:36:db:ac:9b:d1:40:a1:99:
e4:f4:da:4d:aa:5c:c7:dc:bf:10:9d:ac:a2:43:7e:ae:0c:4b:
51:ac:83:1e:37:6b:dc:ea:7a:8b:46:f9:47:e6:03:e5:6a:50:
d0:c5:11:a1:10:57:c1:1f:ef:33:0d:87:cf:78:cb:ee:02:61:
8f:a2:95:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:25 2026 by rpki-client