Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer (raw, json)
Hash identifier: u5UF6goRMOUTonYSlbpVWL7c8gRYx38Mt9jj1yMqAAE=
Subject key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7713
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:50 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.50.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30483 (0x7713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:50 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:85:e1:13:23:0c:59:da:04:92:0d:64:68:
50:6d:cc:63:92:a9:c7:b2:1a:6f:b6:d2:bf:44:b5:
24:a1:7c:ce:7f:16:70:7a:17:62:d4:63:26:a6:f5:
45:5e:b4:52:85:a5:61:92:ca:a8:16:71:20:e6:94:
98:2f:82:fc:2f:a5:2f:c4:56:57:69:89:1e:1d:da:
b7:1e:52:0f:79:d0:27:f1:49:97:a1:a4:19:43:6b:
e3:c3:f9:03:ac:3a:50:52:b3:6e:8f:b1:2f:eb:cc:
71:d1:19:3f:ea:55:6a:9e:23:9c:a3:f2:7e:2a:85:
60:9b:e3:0a:c8:c4:9c:85:7a:09:e4:d8:d0:f3:49:
ac:bd:8d:13:a2:ab:34:ea:89:fc:4a:80:45:33:e0:
9e:0a:c2:5d:a9:ed:69:fa:46:9b:1e:3f:2b:70:0c:
5a:81:78:ea:90:be:5e:2d:63:f7:40:fc:b4:ef:f6:
0e:8c:ed:8a:81:b5:c3:11:d5:32:dc:66:c4:d8:27:
43:7e:40:df:a2:f4:03:38:79:b9:06:f1:0b:27:7c:
05:ee:c3:15:2c:b6:a8:2d:ae:a8:7f:fd:8f:d1:e4:
a0:6f:9e:00:ba:28:21:d1:1c:da:a8:05:f2:24:f0:
0e:4e:14:bb:cc:f9:40:0d:60:7e:23:d9:b9:8e:71:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.50.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:c4:4a:f4:d1:87:0f:4b:9f:37:3e:ab:10:cd:43:d1:37:4f:
bd:eb:c0:d2:3e:cc:b9:43:ae:55:59:86:b7:40:a2:77:2b:b6:
9a:9d:73:4a:55:7f:0a:30:22:9e:3c:98:1e:03:44:0b:56:66:
73:7e:0e:83:c5:e1:6e:3a:63:fe:0c:e4:8d:ed:b3:96:98:83:
8a:c9:03:29:29:88:39:0f:b2:ef:c2:04:05:4e:6e:2f:bd:15:
e0:18:f6:31:8c:db:27:69:5f:3f:aa:dc:7f:2e:1e:d9:f6:a4:
74:79:0a:77:53:9a:d1:0c:ba:c5:5b:2b:dd:3a:05:92:2a:8d:
49:b2:0c:42:92:74:fb:54:c8:86:38:8b:6e:b1:ba:97:16:02:
7e:f4:86:63:83:68:c9:02:99:d2:5b:98:b8:31:24:c5:13:b5:
b8:45:e5:92:64:a1:80:09:66:3e:39:75:a8:08:56:94:bf:8f:
23:a0:3d:b8:38:01:9c:ad:bc:63:45:37:bd:63:49:3a:94:0a:
3a:b9:de:75:c6:94:de:14:f7:9f:16:49:31:20:50:25:96:61:
13:cd:22:9b:97:3a:58:98:84:6e:08:4d:4b:48:0c:4d:8b:69:
81:c7:08:23:e1:4e:11:c5:cb:92:61:d6:c5:87:39:09:c4:d6:
01:2a:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:57 2026 by rpki-client