Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
File: HG_z7AmClLQtl58ltpYFkj4czu8.cer (raw, json)
Hash identifier: 0DalfaaVRahOfAnM7+dqenjVWXWqINrs7vzBF1Vjx90=
Subject key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7595
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:04 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 144.79.194.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30101 (0x7595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:04 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:b7:70:20:c7:7f:f4:0d:60:1b:44:06:50:
6c:76:c8:1c:10:1b:66:4a:d1:a7:6a:14:2e:8e:21:
a9:2d:51:29:68:33:d4:3b:b9:6e:b2:c5:d5:bc:51:
11:13:35:a3:4e:fb:66:5f:a7:b7:de:77:11:ff:4a:
1e:87:2e:94:08:8a:48:21:4a:e2:fc:79:fc:df:b5:
f2:46:a7:c2:ad:6a:ff:de:12:27:e9:e6:a4:03:ff:
7e:55:e4:31:87:62:1b:23:6b:81:d2:43:c8:2c:f5:
92:cc:27:68:af:32:ee:46:bb:e8:9a:c1:81:05:5c:
eb:f7:31:6f:e7:b0:50:d3:2e:5e:04:67:6a:0a:87:
52:c1:2e:17:1a:d8:82:3b:32:31:ba:05:87:d6:8a:
52:61:0a:f5:2d:15:b4:fc:07:75:c2:d5:75:48:2d:
42:1f:31:6c:f5:f7:5d:71:78:23:c2:f6:23:5c:ad:
39:54:d3:6a:d7:0f:55:49:17:1a:9f:17:aa:c2:8b:
ac:19:f0:8e:c2:37:da:52:c3:88:18:ef:b5:9b:f5:
5d:bc:8d:c2:41:45:95:54:30:92:26:8c:52:04:e8:
fb:20:b7:05:07:c4:2e:95:7a:d8:e1:73:5a:f6:17:
5a:15:e4:fd:4b:35:da:b5:1f:31:58:e3:a5:d4:1c:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:59:6b:73:ef:f0:c2:50:83:df:bc:6a:4b:50:89:1c:ea:43:
f8:bc:50:4e:70:13:76:7a:da:42:30:fb:b9:38:0b:b8:5a:86:
30:b7:3a:3a:3c:0b:3a:2c:c3:dd:00:f4:a6:90:a6:ca:bf:d7:
dd:af:9e:38:63:7d:d9:54:9a:74:31:18:09:36:8d:b7:00:b7:
b1:bc:1b:c3:41:e2:e7:a8:cb:10:17:77:0d:de:da:d9:f8:6e:
18:17:61:f7:ce:21:ab:c9:1b:1d:65:99:b9:2a:cb:4f:a5:ca:
b8:04:08:3f:ba:2f:eb:a4:72:ba:cc:98:01:b2:ea:b8:03:48:
ce:b9:7f:4e:95:3e:42:ea:fc:0a:c5:67:c1:b2:b4:87:1a:c7:
28:1a:4f:a2:e4:93:87:04:f7:55:f6:c7:b2:76:9c:b2:c6:b4:
b0:bf:d3:ff:e1:9a:e4:7b:19:55:d1:9b:26:f8:a1:b2:17:8a:
a0:fd:98:86:46:c3:f9:2e:0c:35:5c:56:68:f4:8e:ba:72:2e:
ef:a9:08:96:27:9d:41:92:40:30:fe:d0:73:d5:57:a2:52:44:
32:f2:e7:59:9d:ff:0b:55:cf:b3:a8:90:99:fb:0b:9e:ec:55:
22:de:55:58:3d:d8:67:1b:b5:aa:7f:b3:6e:ed:31:5a:b2:ef:
f8:ac:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:34 2026 by rpki-client