Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
File: I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer (raw, json)
Hash identifier: AFKwmO/KOpCsKR3TFglBiYxnGPvPZ1+7NmpMwN36Hpc=
Subject key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7719
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:58 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 137.132.0.0/16
IP: 165.101.120.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30489 (0x7719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:58 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:4d:19:c8:2d:94:e7:8b:b7:a7:9f:02:c7:
13:1e:ba:c2:df:5e:f2:d0:3e:31:b4:87:2f:57:e2:
63:ed:41:4b:df:f9:36:5b:16:97:9c:b9:d9:2c:71:
dd:28:33:24:65:3a:1d:97:40:f0:96:cc:d2:6e:c1:
e0:13:72:30:e4:38:58:32:0a:09:82:c7:37:86:d9:
f9:27:07:ff:65:d5:d1:95:43:32:ee:6f:c9:05:06:
4c:9b:34:99:63:58:42:46:e0:cb:4f:8c:8a:9e:ab:
12:74:e6:fa:db:36:1e:29:83:6a:51:d8:34:42:26:
bf:c9:ff:10:42:8c:db:01:59:94:48:fb:63:83:c0:
9f:63:13:35:8b:29:2f:09:88:39:b0:ee:ce:57:d0:
af:d2:5f:3e:e2:e4:c6:fc:50:ca:79:f3:87:5c:7d:
e4:de:47:92:45:0e:94:fc:e7:57:64:02:79:37:cc:
b8:c0:17:d3:d8:6b:00:f9:03:70:fb:38:cf:5d:5f:
cb:65:bb:c9:39:49:14:5d:8f:cc:4c:7e:35:22:da:
fc:87:e5:c8:4d:85:63:33:a5:17:8a:27:c5:05:db:
26:4f:5d:73:9c:d6:f7:78:98:38:eb:23:69:37:ad:
3f:77:e7:38:8c:4f:9b:19:be:9a:da:1c:41:0c:32:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.132.0.0/16
165.101.120.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bb:d4:08:d8:6e:1f:6e:17:90:aa:95:f2:ff:cc:55:c3:aa:
30:b0:66:36:52:d6:ee:f7:c2:6a:4c:0b:59:b4:c8:92:f8:dc:
c8:e9:38:9e:8c:9e:17:22:14:50:ad:95:d7:52:a7:99:76:29:
37:e6:f3:84:d5:71:74:e3:ee:a4:94:3c:10:be:ee:05:5a:d7:
36:d0:c6:de:55:a7:4a:f1:c3:d0:10:28:c7:c7:48:a5:c3:aa:
29:b1:4e:50:95:ee:a1:00:15:cd:9f:3d:17:5a:a0:d8:bf:fa:
93:ca:03:d9:96:fb:79:b3:88:fa:d0:07:88:2b:2d:2d:8c:e4:
4c:24:d4:52:9c:a7:c6:3a:53:cb:83:f5:e9:15:9f:41:10:da:
d0:44:20:1e:ec:12:59:70:06:f8:3f:74:e3:ef:1f:75:86:2f:
49:78:24:f6:39:2c:87:3b:80:e7:8a:cb:fb:2c:f2:5f:a3:d1:
5d:9a:ce:2d:0c:5b:73:4a:ea:1a:82:96:68:a6:5b:83:11:e1:
4c:5c:39:e8:8d:e3:60:1b:d1:9d:fa:19:dc:8e:5c:dc:15:be:
59:61:af:ce:5e:d4:18:ac:5f:a6:8c:08:8c:66:93:b9:e6:f8:
72:cb:f1:1d:3c:03:dd:21:72:a0:74:50:cc:59:0b:32:f1:ae:
2a:5b:21:aa
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICdxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1OTU4WhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5REIwODExMC8GA1UEBRMoMjM5MUZCNEQ5QUVENDRBQjgwRTZBRkQ4
RDgyMEExQzA2NDQzOTgyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANFRTRnILZTni7ennwLHEx66wt9e8tA+MbSHL1fiY+1BS9/5NlsWl5y52Sxx3Sgz
JGU6HZdA8JbM0m7B4BNyMOQ4WDIKCYLHN4bZ+ScH/2XV0ZVDMu5vyQUGTJs0mWNY
Qkbgy0+Mip6rEnTm+ts2HimDalHYNEImv8n/EEKM2wFZlEj7Y4PAn2MTNYspLwmI
ObDuzlfQr9JfPuLkxvxQynnzh1x95N5HkkUOlPznV2QCeTfMuMAX09hrAPkDcPs4
z11fy2W7yTlJFF2PzEx+NSLa/IflyE2FYzOlF4onxQXbJk9dc5zW93iYOOsjaTet
P3fnOIxPmxm+mtocQQwyXHECAwEAAaOCAvgwggL0MB0GA1UdDgQWBBQjkftNmu1E
q4Dmr9jYIKHAZEOYKDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OURCMDgvMzg4NkU4QjgwOEY5MTFGMTgwODREMDg2MzEzRDhDNjcvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlEQjA4LzM4ODZFOEI4MDhGOTExRjE4MDg0RDA4NjMxM0Q4QzY3L0k1SDdUWnJ0
Ukt1QTVxX1kyQ0Nod0dSRG1DZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw
EQQCAAEwCwMDAImEAwQApWV4MA0GCSqGSIb3DQEBCwUAA4IBAQBTu9QI2G4fbheQ
qpXy/8xVw6owsGY2Utbu98JqTAtZtMiS+NzI6TiejJ4XIhRQrZXXUqeZdik35vOE
1XF04+6klDwQvu4FWtc20MbeVadK8cPQECjHx0ilw6opsU5Qle6hABXNnz0XWqDY
v/qTygPZlvt5s4j60AeIKy0tjORMJNRSnKfGOlPLg/XpFZ9BENrQRCAe7BJZcAb4
P3Tj7x91hi9JeCT2OSyHO4Dnisv7LPJfo9Fdms4tDFtzSuoagpZopluDEeFMXDno
jeNgG9Gd+hncjlzcFb5ZYa/OXtQYrF+mjAiMZpO55vhyy/EdPAPdIXKgdFDMWQsy
8a4qWyGq
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:41 2026 by rpki-client