Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer (raw, json)
Hash identifier: bIg7F2U7Xa6vRLzumHVPC3jXOWNXhTUGDJmMuZiEgHA=
Subject key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 74A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:39:38 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.234.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29860 (0x74a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:39:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:49:75:2e:05:45:53:da:74:b1:d4:6e:b6:
43:6d:00:ec:91:20:eb:8d:da:02:e7:08:01:60:f0:
79:2b:81:98:f2:4c:99:21:1b:35:6c:d3:00:8d:23:
24:92:76:0b:75:3d:f1:ba:d0:75:25:5b:03:6d:98:
d7:61:c4:1f:46:1e:c4:e1:75:67:66:c8:2f:cd:b0:
60:94:da:0f:3e:cd:61:66:93:b2:34:49:29:a2:0f:
fe:4d:26:e8:09:30:e2:d9:4f:c7:5d:ae:5c:63:e3:
56:f0:26:28:7f:86:4a:0b:9c:02:4e:71:e4:1e:ab:
1e:c3:2e:64:04:44:35:ac:43:47:8e:f1:e2:d5:ad:
39:eb:d8:ef:6c:e5:2f:d7:f1:ea:30:8f:ac:05:58:
ea:e9:bb:64:c0:49:a2:dc:8a:f7:b8:cd:2a:65:6a:
de:bf:2c:39:ad:74:89:31:d4:c2:5e:96:b6:59:f1:
2d:6b:3a:dc:4a:96:2c:a5:bb:cf:de:c1:c0:17:7b:
7b:ac:14:36:cf:ee:ad:22:6b:9f:95:90:12:f4:23:
cc:79:16:a5:2e:19:01:13:1e:cc:98:eb:4a:9f:38:
bb:3b:f6:53:1b:a6:94:a9:6e:a3:da:7c:32:2f:10:
b6:8a:d4:94:ee:3a:5b:6a:b7:63:c8:b4:7a:f7:fd:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.234.0/23
Signature Algorithm: sha256WithRSAEncryption
14:96:55:8c:0f:4c:9f:9f:3e:c6:6f:88:fc:e2:e3:07:68:c4:
f8:3d:12:d2:b8:7f:5d:89:69:ec:2b:3d:f4:cc:ce:e8:de:15:
16:4c:bb:bf:34:18:6a:18:e5:89:e7:48:b8:1b:dc:98:ca:e1:
3f:09:5c:4c:35:8c:a5:b6:04:56:13:bf:2c:04:88:40:7f:ec:
2c:90:47:64:e0:e9:36:8c:f7:cc:c3:2a:1f:dc:33:05:ee:51:
cd:f5:4f:78:d0:17:7a:c7:05:8d:4e:69:f4:5f:66:91:c1:20:
09:9b:ab:49:a2:92:0e:a6:ea:74:8f:c1:b8:13:a3:d6:f7:cc:
19:87:42:66:9e:5d:a9:56:80:3e:03:53:02:1f:d6:c2:e5:0f:
09:6c:9b:7a:25:9e:4a:2a:06:81:27:38:2f:b8:a0:68:ab:c4:
90:f5:84:ff:e5:b6:b7:f3:e1:58:80:1b:af:e2:68:86:37:84:
02:f9:41:b9:10:d0:e2:4b:fe:d0:fd:7d:de:92:ce:79:9f:24:
75:1e:1f:6a:09:a7:66:40:cf:fa:20:22:0b:ec:8a:ba:d8:84:
b9:10:dc:b9:a8:9c:ce:26:2c:90:03:57:99:33:d3:22:84:31:
99:5d:6b:cd:b0:3d:c7:51:f0:6c:2c:58:bf:95:ec:40:70:36:
43:3a:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:35 2026 by rpki-client