Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
File: E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer (raw, json)
Hash identifier: ZKSw1CDR111B6fzForlY0i9UC0/OZ07yUgHE4Tjuhfs=
Subject key identifier: 13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:38 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.154.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30128 (0x75b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:38 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:83:37:4c:dc:4f:e4:2d:2c:95:94:b6:5d:
ec:77:ab:d4:22:45:23:db:30:79:5d:43:e8:ba:d0:
ba:fc:0e:01:f6:59:d6:90:a7:b3:9b:2a:b3:95:49:
5d:fe:cb:4d:16:65:bc:61:6f:30:12:94:b1:0c:a7:
5d:1d:6e:f3:76:70:20:1d:0c:a3:fe:2f:27:77:46:
35:a9:e3:87:67:70:fc:12:f1:10:a4:d5:9e:c1:b6:
86:7b:92:26:a3:6b:07:f2:12:10:cc:b0:21:63:25:
c1:19:8c:92:6a:0b:dc:76:ea:f0:be:b6:01:6b:1e:
6f:a7:a2:36:fc:3b:63:46:b3:43:67:6b:74:d2:b8:
3f:c1:02:b7:63:96:86:7f:12:a9:8d:e5:3b:f2:18:
32:07:3e:d8:78:03:13:fb:8e:13:15:3c:fb:60:38:
1b:d5:50:b4:db:b1:02:43:25:0f:00:3f:1f:d1:90:
5b:12:86:43:d4:87:3e:39:ca:01:88:59:f8:29:91:
66:57:3c:3a:03:c0:0d:3e:61:bc:72:3d:6c:85:f7:
f1:fd:59:6b:15:a9:63:23:ec:ee:03:4f:ed:eb:a3:
81:2a:96:a9:10:e4:11:ab:83:dc:3a:7b:c8:50:33:
4b:f6:b8:83:9d:cd:5b:67:27:30:e8:44:fd:23:9e:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.154.0/23
Signature Algorithm: sha256WithRSAEncryption
41:fe:ae:ab:c4:6b:64:24:48:f2:a0:13:66:da:f5:83:6c:a3:
2f:18:62:d5:6e:ca:02:92:b2:51:d5:df:b2:d2:99:19:ca:f4:
50:f4:f0:ae:31:96:d7:9b:ec:8e:2d:b8:31:4a:d9:c6:64:d7:
6e:dc:fb:79:3a:79:d4:5e:ea:63:ce:83:15:80:d7:37:94:28:
c1:b2:aa:a9:91:65:94:fe:23:fe:97:17:ce:1c:cc:08:5e:b2:
a9:4b:99:6e:8b:33:08:64:24:27:5e:86:33:75:90:07:9d:84:
31:52:bc:f5:2f:a3:33:c1:11:90:f1:f5:db:70:c8:d1:56:9b:
93:09:23:9a:38:d8:29:3c:7a:21:b7:c1:82:79:f3:63:e6:2a:
1d:f8:e7:07:f5:c2:ef:b0:ff:3f:84:4f:dd:39:15:b2:eb:c9:
8d:e1:7e:61:c6:62:5e:c3:3d:0f:03:7f:e4:dd:3a:74:e0:c8:
7a:2c:c8:48:95:da:55:70:af:7c:a8:6c:81:c2:e8:9d:18:97:
03:f6:f1:fb:ce:9b:46:7b:ad:bc:f4:a3:55:b2:1c:4c:42:28:
43:50:3e:42:fa:f2:87:85:18:37:58:6b:d0:20:7a:85:6d:ad:
ab:9c:05:7f:a9:11:a5:6a:19:4e:62:94:3c:7c:e4:01:2a:fc:
56:d6:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:27 2026 by rpki-client