Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer (raw, json)
Hash identifier: 3R4M9LU0xIqTEynW+5eKHzBCbS0WoftzbsE/Nr/lT0E=
Subject key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 751F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:49:30 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.102.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29983 (0x751f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:49:30 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:b6:ab:b6:43:4e:7d:06:76:a9:87:f2:23:
2c:e5:76:6e:02:4e:46:9c:a6:ca:19:a3:96:cd:4d:
53:67:df:b2:2d:d2:ca:07:5c:3d:8e:20:a9:50:0c:
02:68:9c:55:7d:eb:e3:dd:93:98:2f:5d:c0:87:3d:
55:de:17:79:bf:22:ed:71:c9:d7:7d:15:d5:ad:76:
33:4d:a8:77:7a:b1:0f:15:06:0e:6a:37:48:8e:57:
9e:c6:5e:3e:e1:74:65:af:ca:c9:ea:c1:71:b9:b3:
c6:76:96:95:eb:5d:ce:89:77:cd:cc:73:4e:ed:e8:
62:65:6b:19:ed:85:80:7e:f8:33:06:a9:37:e3:63:
7f:6a:e7:fc:21:71:d0:b1:93:f1:e4:bd:e8:bc:50:
a8:fd:8f:57:a8:36:c0:ba:b8:51:d0:17:a2:62:e0:
e0:d1:d2:5a:ed:3c:89:5f:32:8a:d9:0b:b2:57:24:
d0:7b:56:5e:5c:31:a0:6c:4c:73:f9:9c:43:d0:a6:
2b:8f:3d:5b:e4:58:e2:64:a1:28:e9:7e:aa:07:30:
37:26:2e:84:fc:aa:73:09:28:9b:3b:e5:2b:7a:fe:
20:4e:9d:07:78:77:e1:f8:61:45:17:2a:4a:a4:0e:
c3:93:4d:95:2a:89:44:f9:ac:64:94:e4:2d:b7:8c:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d5:a2:79:c3:a4:f2:65:5b:93:ac:68:f6:7a:db:63:fe:be:
38:59:ff:12:ab:2c:e9:e8:45:a7:81:5f:bd:e4:84:a8:4d:0f:
29:04:b2:3e:09:1a:ec:ee:a3:75:6e:aa:df:c6:73:ab:e6:59:
78:72:a6:31:5c:ea:c3:ea:89:78:c4:45:78:38:34:c7:43:41:
e0:a4:eb:35:f0:b3:1e:ec:07:07:ef:fa:35:f4:2e:3b:f1:63:
1a:74:3a:b5:cc:56:15:83:db:2b:f1:01:9c:97:e0:6c:35:71:
6c:85:e0:55:4e:9c:b2:8d:e5:1a:e2:62:90:ff:7e:b7:06:b4:
43:41:74:6e:69:ab:32:75:58:ac:04:72:8e:85:bd:d3:b0:d1:
31:3f:6d:89:a7:88:67:fa:3a:9f:e1:85:ef:c1:ca:52:36:19:
93:35:5d:7d:53:d4:ef:9a:cd:6d:95:1a:d1:6a:8e:af:d9:01:
93:f9:22:12:22:67:01:ae:cc:11:23:ba:02:71:a9:32:e2:59:
d7:d6:7e:42:ac:3a:2f:9f:a9:db:0e:91:dc:a8:aa:44:72:44:
7a:51:c5:50:e5:d2:60:6b:6d:a1:01:43:b7:8e:d9:70:f0:41:
b4:c7:08:02:dd:93:94:da:b8:61:50:eb:99:03:59:d8:98:6f:
a6:07:95:7c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI0OTMwWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBOTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlE
NTc0M0I0NzQ1QkY1OTA3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKRxtqu2Q059Bnaph/IjLOV2bgJORpymyhmjls1NU2ffsi3SygdcPY4gqVAMAmic
VX3r492TmC9dwIc9Vd4Xeb8i7XHJ130V1a12M02od3qxDxUGDmo3SI5XnsZePuF0
Za/KyerBcbmzxnaWletdzol3zcxzTu3oYmVrGe2FgH74MwapN+Njf2rn/CFx0LGT
8eS96LxQqP2PV6g2wLq4UdAXomLg4NHSWu08iV8yitkLslck0HtWXlwxoGxMc/mc
Q9CmK489W+RY4mShKOl+qgcwNyYuhPyqcwkomzvlK3r+IE6dB3h34fhhRRcqSqQO
w5NNlSqJRPmsZJTkLbeM1Q8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQPVGep0esJ
i1LME51XQ7R0W/WQdTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTk3MjAvNTE5QzEwNEVFNTU5MTFGMEIyMjg4OTU4Mzg2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE5NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhy
Q1l0U3pCT2RWME8wZEZ2MWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJBPZjANBgkqhkiG9w0BAQsFAAOCAQEAStWiecOk8mVbk6xo9nrb
Y/6+OFn/Eqss6ehFp4FfveSEqE0PKQSyPgka7O6jdW6q38Zzq+ZZeHKmMVzqw+qJ
eMRFeDg0x0NB4KTrNfCzHuwHB+/6NfQuO/FjGnQ6tcxWFYPbK/EBnJfgbDVxbIXg
VU6cso3lGuJikP9+twa0Q0F0bmmrMnVYrARyjoW907DRMT9tiaeIZ/o6n+GF78HK
UjYZkzVdfVPU75rNbZUa0WqOr9kBk/kiEiJnAa7MESO6AnGpMuJZ19Z+Qqw6L5+p
2w6R3KiqRHJEelHFUOXSYGttoQFDt47ZcPBBtMcIAt2TlNq4YVDrmQNZ2JhvpgeV
fA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:01 2026 by rpki-client