Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer (raw, json)
Hash identifier: mFqy8k0sOZtpIm46XjpF5yo18OiQ7Br12HLIsZdNnC0=
Subject key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76F2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:07 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.212.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30450 (0x76f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:b2:d2:98:f2:6b:52:ef:67:76:b7:3a:10:
49:87:d6:ee:67:57:2c:8f:79:84:33:c0:bb:8b:3e:
64:d6:d3:eb:15:75:05:b6:e3:fe:5e:49:d3:58:71:
c1:8b:85:7e:82:bf:5d:fe:eb:3c:29:b6:67:fb:ff:
76:99:e6:5d:ce:dd:e7:3d:a7:67:15:df:7a:c3:eb:
b2:21:28:c8:ac:b4:66:bb:bb:b5:61:89:79:34:c6:
c3:0d:93:a6:4b:93:80:c8:94:35:91:0b:62:53:07:
85:ff:0e:d2:99:5a:84:38:c8:1e:30:ea:ff:d9:01:
37:fc:ae:e3:1f:eb:d1:b8:2f:db:cb:e4:e3:61:09:
f6:9e:52:b7:6e:14:fa:19:8b:f2:43:e8:1e:7b:ef:
92:f0:d9:e5:ae:5f:76:fd:b4:f4:0b:a4:14:f8:9e:
8a:58:b7:71:5f:85:68:93:9c:a1:cb:7c:62:ce:6e:
21:9d:26:89:a8:0d:3d:08:87:6f:3f:4c:27:10:8d:
21:8d:5a:6f:bc:2b:28:29:e5:d2:fb:07:0e:a0:b8:
9e:75:99:7b:05:24:08:38:42:a8:63:5b:cd:14:84:
b6:87:79:07:8d:30:81:d1:52:6a:7d:e9:b3:8e:53:
28:cb:57:3c:4d:ac:3e:89:84:78:a9:47:ad:bd:7e:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.212.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:29:b6:7f:30:48:27:eb:35:85:c9:9b:1a:81:16:8c:51:91:
59:11:86:59:3a:b0:5b:86:58:98:66:ef:d1:24:2e:7c:a4:33:
26:f3:ca:3e:ec:72:db:57:2e:85:7f:83:eb:44:8b:34:ea:67:
0d:ea:14:53:69:06:d0:26:e2:a9:be:b5:4c:e4:0b:ea:4a:31:
4e:fa:ad:f6:33:84:fa:03:21:58:b6:35:a5:d2:68:02:15:3d:
54:28:94:4b:c9:16:40:eb:ae:09:09:ec:ce:50:b3:21:77:81:
a2:3e:c6:5a:9b:55:1c:62:7b:40:e6:73:16:71:46:a9:bf:aa:
4f:58:0a:9e:1c:7c:c4:16:29:2a:e6:7e:f6:59:06:7d:3a:c7:
25:5a:89:15:f3:fc:aa:52:89:c7:58:de:7a:27:cf:e0:9d:cf:
f7:10:48:1c:f3:2e:4a:1f:1c:2e:1c:92:bd:27:2e:56:3e:02:
ac:70:88:3c:39:0d:7b:4f:e1:cd:70:4f:ba:18:68:fb:bc:66:
49:1d:b7:1e:16:91:36:5f:f4:b7:89:e7:ac:b4:30:05:d6:d8:
24:20:ab:9e:c9:f8:0c:bd:d0:f4:a7:b6:a9:0d:98:d7:6d:64:
ae:f4:20:ab:61:e7:62:ee:44:61:68:97:1f:1f:20:d9:9a:37:
eb:30:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:52 2026 by rpki-client