Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer
File: IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer (raw, json)
Hash identifier: MS+r/M9Tx5I6pILPrho0eNlBy+O+t+VsQ9xUyRz6He8=
Subject key identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:59 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.194.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30143 (0x75bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:59 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91EA409, serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:3e:a8:aa:67:66:99:76:67:c4:21:07:51:
80:8d:f2:1d:76:ea:d9:0e:ef:f3:e1:de:3d:d2:bd:
09:fb:b7:4f:5c:93:04:8f:d0:b6:43:ef:83:6e:ee:
29:94:33:81:d9:0c:8e:42:a2:69:3a:fc:ee:18:f3:
06:1d:b5:d9:24:cd:5b:71:ec:62:3f:a9:0f:3a:c2:
2a:29:da:b9:ba:2d:51:9c:0c:2c:ee:b1:28:e4:02:
22:fe:84:99:94:76:a9:8f:f8:9d:9a:5a:49:04:1d:
70:3c:7c:1e:c1:86:e0:ae:67:22:9a:fa:7e:71:d4:
16:f0:f4:f9:03:28:4a:b6:7b:13:5c:67:55:a1:33:
c9:44:ff:86:b2:16:31:26:6a:e3:28:70:b4:37:82:
d8:12:ce:e6:70:5c:54:c1:d6:1b:cb:0b:ce:44:41:
a3:f5:0b:28:ba:f0:3f:91:12:e2:77:c2:e4:a8:44:
da:09:c9:46:45:05:64:4f:a5:45:28:2e:4e:65:5e:
28:b4:d5:14:5d:f0:e6:af:e1:c0:d0:fb:cf:d5:9d:
35:e1:49:83:5f:33:f2:d0:0a:e3:5a:72:97:e0:0b:
a6:a0:b1:72:38:63:cb:cf:57:5c:16:e3:e3:70:7f:
69:04:86:ba:79:4c:b2:0e:37:83:d0:c7:ea:5f:68:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.194.0/23
Signature Algorithm: sha256WithRSAEncryption
06:4b:b1:89:3e:5a:00:3e:c8:8c:32:9b:ee:39:07:d4:71:f4:
11:6e:06:2b:0a:98:92:97:d4:79:a5:36:35:00:0d:c7:ad:27:
ff:ce:45:e8:63:c6:80:cc:1f:f1:b3:75:a5:2f:ed:cc:6f:71:
7b:c9:1b:06:e9:87:bf:e7:fd:d5:1d:26:18:4a:9b:70:62:e6:
ac:0c:75:18:c9:2b:11:71:82:8f:3b:4d:81:5c:cd:0f:95:da:
db:5b:08:ea:49:57:c2:63:7a:da:80:85:59:d2:90:cb:44:3a:
30:06:e0:9f:81:5f:c4:65:d6:c6:9d:cf:dd:ee:bf:1a:85:e6:
58:18:39:b5:1f:da:d7:e0:be:d8:0e:67:43:84:2d:4a:67:c7:
4d:30:ee:8a:5e:42:a6:1d:3d:d7:cc:d4:83:99:e2:40:25:ca:
5b:c6:ba:df:45:5f:07:8e:b6:6a:9d:8e:23:33:ae:97:3a:37:
88:e5:09:4e:59:ed:a7:9e:96:f2:e8:f7:4d:ba:76:40:25:f3:
e1:cc:fc:14:4f:c7:66:73:4e:e1:71:49:22:00:44:dd:a1:b4:
b9:cc:66:cf:02:4e:cf:41:eb:3f:0d:83:5a:35:66:8a:bf:e6:
22:81:5d:1e:fe:90:17:d4:07:59:74:0a:40:cf:8a:18:d6:26:
f3:55:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:31:09 2026 by rpki-client