Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
File: F2vOFchi1HunYKH2ZTj4HVxJO4E.cer (raw, json)
Hash identifier: r5PuAC9FMmLWVn3eiTLC8A3HrE5jR1IVXL3cyNGyJOk=
Subject key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 74AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:47:04 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.228.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29870 (0x74ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:47:04 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:51:82:c1:a9:ad:ec:ff:ef:36:67:91:4a:
b8:ff:c8:5b:b6:eb:32:96:ea:8a:4c:b2:4f:51:07:
12:99:ae:db:a7:a7:40:d7:a3:f0:a6:49:a0:60:1a:
e0:4f:1f:5c:70:4b:ac:cf:7d:76:c7:7d:f7:80:a3:
74:75:ee:29:f2:39:ed:77:a9:08:4e:15:43:60:fc:
e9:b1:20:f6:42:1f:51:c9:e6:c9:c4:ca:e3:47:94:
ea:e5:8c:12:a0:2e:28:d8:d9:9c:a3:11:69:b9:00:
ed:93:8b:61:bf:d3:06:eb:15:6c:83:da:dc:0d:5a:
61:f7:32:02:f0:ab:b3:78:5e:b8:fe:ce:88:ba:e7:
3f:6f:63:cf:39:10:f7:c7:a8:eb:96:41:0c:3a:e3:
70:55:6a:8f:71:f5:c9:56:20:11:6e:48:13:cd:5e:
cd:6c:49:f7:c4:a2:bb:7d:fb:88:7e:88:84:75:e9:
0f:12:92:92:02:02:d0:bc:e4:b8:60:8a:cd:ed:eb:
f6:81:10:84:cc:f4:5f:56:ea:0d:39:b7:82:d4:a8:
b7:b9:85:15:99:4f:6f:6f:4c:e9:34:09:df:9f:35:
87:c0:f9:90:9f:3e:ad:8b:6f:3a:b2:5b:b5:74:5b:
d1:c1:e0:4c:15:80:c1:5b:2d:96:80:d3:e4:76:6c:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:90:08:b4:0d:98:fb:5e:c8:1c:9a:72:b1:2f:5b:96:4b:5c:
9f:aa:d6:54:d0:36:32:86:32:ea:55:45:1a:b1:82:c8:7d:45:
1b:d0:58:92:7d:71:2c:5f:19:2c:55:5a:1d:d8:cc:99:3d:ba:
5a:fa:d7:cf:77:7b:6e:ce:2d:cb:e3:77:a5:87:b8:7d:bb:d4:
93:91:6c:f5:65:1f:96:c6:42:48:09:dc:be:87:f4:21:df:c6:
b2:b1:35:cd:5a:50:95:96:39:32:39:e5:ef:1c:4c:26:a1:c7:
ad:3b:bb:ca:cb:18:20:ac:13:e5:c1:7a:1b:c1:7a:0d:3b:79:
c2:ee:6b:e4:0b:ec:dd:4a:6a:08:26:c1:73:3b:fc:2b:1d:18:
5e:fb:5d:8f:23:b7:1c:a8:ce:58:69:b4:f8:24:bb:20:87:0d:
1a:f3:d1:a7:03:db:82:fd:d6:f5:cc:03:79:28:a0:e4:f1:87:
b8:ea:7e:ed:2a:15:73:c9:82:ab:86:0a:b8:c9:38:93:5a:a5:
b3:89:42:42:bc:2f:26:c1:53:35:6d:d0:28:79:4c:43:97:f6:
05:a6:91:b9:b0:64:29:9b:0e:60:e0:a1:50:68:f8:b6:99:f9:
ae:d0:f5:8c:0f:d4:51:68:0b:ce:a6:2c:0b:fb:ed:6f:d7:99:
93:e5:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:33 2026 by rpki-client