Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
File: Fp97ebHLC9YNnChOysqKz1dZgFE.cer (raw, json)
Hash identifier: ZABdcRdcL5hPaJTD7vqSVVUT2uAfKnIOVGuQ/zWJ23Q=
Subject key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7536
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:00 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.52.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30006 (0x7536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:00 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9137627, serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:5b:7b:bd:b1:ce:03:65:91:fc:12:25:9d:
05:ee:e8:be:15:01:a3:46:1d:cf:b6:c9:3d:87:07:
e5:eb:6a:1d:6f:db:e0:3a:d0:89:37:f7:11:ed:3e:
a8:e1:98:a6:49:c0:6a:ca:d9:a3:98:26:1d:0a:24:
e3:69:12:2a:98:23:21:28:23:24:b9:19:51:18:cd:
42:f9:0c:7c:db:db:a6:83:9c:a6:b1:e1:d3:21:ba:
35:8b:4e:5a:98:e8:69:eb:31:97:ae:f8:88:ba:6f:
95:7e:60:3d:aa:1d:82:37:26:b3:d0:e1:7c:4a:eb:
40:24:a0:18:4a:05:f2:dc:28:fa:fb:4d:1e:69:f6:
30:57:32:75:20:ac:f3:24:a2:c9:0f:71:49:22:bb:
d1:13:47:e2:1f:0c:9d:a1:40:db:84:32:e6:eb:74:
83:5f:18:12:bd:97:a1:fd:e6:09:1a:20:cd:51:21:
ae:7d:96:84:20:9b:02:87:1d:22:61:77:09:c9:86:
f5:8a:92:15:9e:cc:78:23:23:ea:21:43:a1:a1:01:
97:05:42:f8:8c:3b:55:ec:38:0b:31:0a:ae:2c:ac:
19:e3:4e:a3:23:1a:b3:8b:2e:13:58:75:ae:c6:6b:
05:1f:ee:95:e2:82:ce:80:76:f6:5f:11:af:98:cc:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:68:8f:b4:74:1b:00:a6:23:ac:e5:85:92:15:68:5e:3f:cc:
95:76:9d:a6:fd:ce:f3:ab:2e:db:b3:f8:0c:d5:f7:b1:81:df:
3a:27:e3:1d:d8:df:23:34:c5:da:34:02:11:a0:a4:eb:74:c1:
3c:60:e1:aa:81:7b:d7:d6:f8:c6:2a:7f:30:62:33:58:0d:ce:
ff:37:d8:7d:3d:51:35:0d:70:b0:2a:aa:4b:44:f0:59:6a:f9:
44:6f:c5:be:62:58:33:13:48:63:15:82:e2:4c:a7:4c:ce:36:
13:8f:4b:bd:23:66:90:6c:ce:b2:8f:8b:6d:c8:3a:75:6b:97:
5a:88:f6:b5:93:7f:53:d2:b4:cf:e5:45:6c:60:7e:f1:6b:0a:
ca:aa:42:90:fe:71:28:d9:ab:ee:4d:81:65:50:26:3d:ba:e6:
8b:ad:62:d8:db:94:cb:36:84:f3:a8:b6:01:fb:3f:99:f0:ca:
3e:e1:7f:73:38:1c:26:5d:b2:ef:52:75:d8:fb:89:87:86:a9:
e2:35:ca:3b:94:63:4b:c6:c8:05:ee:b6:9e:ca:77:aa:41:87:
a0:be:7d:f0:8e:5a:85:67:b9:67:72:5a:15:17:b5:01:cb:37:
d2:e2:b0:4a:e9:20:45:e1:df:ba:46:86:d0:a4:ed:cf:e2:63:
a8:45:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:10 2026 by rpki-client