Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer
File: HLlfP3vebhmbdAuSgqxyKk7amZs.cer (raw, json)
Hash identifier: wdqvPTs6nsQQSEdixdVJ8PPUSgNdSVGZfmOXdEtv4zc=
Subject key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 759C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:13 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.184.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30108 (0x759c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:5d:a3:77:40:13:3a:89:a1:71:d8:b8:4b:
ba:60:65:95:b7:54:67:88:33:49:7e:e0:d5:bd:9a:
8d:08:6f:2e:ca:a1:30:6b:dc:e6:91:dd:12:bb:0b:
80:d0:d7:b1:76:00:2a:b6:0b:8a:1a:70:bc:f7:52:
8b:16:48:12:4f:7f:87:9b:19:6a:65:77:d8:80:59:
4c:93:cb:81:53:f0:f9:04:fc:4f:c9:f2:ee:5f:47:
3d:19:b6:ef:73:f0:ad:1b:6f:13:12:d9:0d:d1:8d:
c7:80:1e:99:c1:c5:53:5d:53:c9:fb:9e:c4:bc:12:
cc:4d:93:2f:00:71:21:83:be:1e:5d:d0:a6:03:f7:
fc:60:e9:7c:6e:64:cb:79:07:15:e6:a9:e8:80:03:
74:73:97:96:5c:bc:f1:7e:3e:97:7d:ef:a8:4b:aa:
04:f6:ff:f4:27:42:57:82:55:f4:59:c4:c7:14:dc:
d6:5e:4a:05:c1:6f:11:11:c6:f9:4b:03:44:a2:50:
95:3b:26:bb:e6:8e:da:59:bf:5e:13:63:2c:cf:d0:
13:9a:42:65:2d:50:b1:db:c9:c6:27:ac:61:81:5c:
d8:bf:f6:24:a5:e4:f6:07:b8:ec:f8:80:a6:40:e4:
46:9e:66:16:01:69:16:7a:51:bd:94:a5:ad:e8:26:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:c3:39:e6:c5:92:48:4a:d2:16:9d:f4:e1:b7:c6:12:c9:41:
7f:58:37:47:b1:38:ea:68:1b:55:11:2f:e2:4f:af:d0:b4:96:
d3:94:1c:8a:a6:ed:1f:c7:47:b5:dd:14:51:98:4d:8b:d9:45:
34:a9:7e:e7:47:00:e9:fd:b7:1b:27:c3:46:98:f6:44:99:fd:
e5:5c:d1:de:46:4b:aa:0b:72:b8:6e:39:0c:e0:fd:6e:1d:41:
1c:f4:07:b3:38:f0:ad:e4:8a:f1:e2:c1:0c:45:6e:e5:ad:6b:
b9:76:96:63:b7:24:40:4c:61:02:12:e8:60:be:21:b8:7c:e9:
f9:76:14:0d:93:fe:d6:c6:f3:5a:34:8f:64:76:e9:0a:3e:88:
a3:51:c6:7c:46:45:39:b6:8b:e7:65:8b:d6:b7:a4:57:eb:0b:
3c:48:ae:ef:3a:9b:67:e6:9b:12:cc:22:83:a3:d8:da:c7:6f:
af:59:9b:e1:a6:61:29:4e:f9:8c:b6:2c:c4:5a:f0:89:64:cb:
9d:49:4b:90:97:d9:a5:a9:e0:cf:a0:c6:ab:6a:c8:e6:ce:4b:
92:e0:ae:68:ba:66:a6:f6:a8:f6:33:e7:35:61:24:97:3d:9e:
87:87:d8:a3:1f:cd:60:c0:9f:a2:69:d4:ed:c6:39:40:93:4b:
8f:c4:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:07 2026 by rpki-client