Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer
File: IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer (raw, json)
Hash identifier: xX7czRA/gDRkmGDtyhaq/u4KOHDtACwnmUNyeFnj8W0=
Subject key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7527
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:49:42 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 96.9.160.0/20
IP: 132.147.64.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29991 (0x7527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:49:42 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9195BA9, serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:31:4e:b8:c7:f8:6b:b1:7b:e5:91:65:26:
98:cf:1e:49:80:aa:e5:9a:c0:f0:58:10:a3:96:db:
5a:70:f7:5b:cf:82:9a:06:af:ff:d7:0d:8e:48:b3:
cb:e4:85:67:2b:cb:55:b0:58:09:43:41:6b:02:82:
cb:13:29:df:c0:64:08:d2:bd:46:a8:b6:f6:5b:c4:
1b:eb:5f:77:42:15:be:72:85:d6:66:46:d6:af:b6:
25:29:d6:d7:49:c1:59:5c:d4:cc:35:bd:6d:1c:97:
86:ee:a5:2c:87:10:1b:b9:53:f6:cc:44:7f:9f:95:
bb:37:79:0c:9b:b7:00:86:f7:5c:0e:e2:0b:41:a3:
3d:a5:cf:c1:c5:f0:9d:1a:a5:a5:df:02:8f:7a:8f:
04:88:5d:e5:22:52:a2:46:a1:28:66:89:64:59:3f:
c1:11:37:c3:4a:2e:7c:46:f8:cb:ad:4d:3a:dc:20:
42:20:0d:43:43:6e:a2:15:5c:1e:2a:d2:f1:06:2a:
bb:93:ef:5d:9e:db:e6:a7:3d:c2:96:38:7b:37:91:
0e:8b:17:91:47:80:62:ff:e6:dc:eb:7e:69:98:9a:
d9:b1:58:6b:45:50:2d:ff:fc:61:79:23:d0:39:7d:
2a:d1:6c:54:8b:a4:48:20:10:f8:09:71:25:e8:b2:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.9.160.0/20
132.147.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:37:98:cf:9d:72:f0:ae:68:f1:42:51:9a:e5:71:00:e0:d7:
89:17:a2:6b:c3:8d:c7:4a:a4:7a:7a:13:cf:31:91:cb:21:62:
8c:c9:82:1c:04:17:f5:fb:1b:31:72:9b:44:6a:67:62:44:76:
18:e5:b3:5a:bf:d6:38:a1:2b:a8:66:09:01:a8:14:81:a6:95:
9d:90:b6:bf:5f:c8:06:a1:08:3c:42:49:56:83:90:ac:c6:07:
8e:1a:fc:7a:1c:1d:1c:3d:f6:1b:5f:fe:ce:03:2a:57:f9:17:
d8:07:82:84:bc:21:9d:5a:26:26:b3:2c:83:02:98:c4:68:56:
dc:ca:06:4d:b7:28:36:52:2b:25:b6:22:ce:b2:4f:4b:f7:d6:
15:83:34:48:1c:36:e4:a5:ba:dd:3b:9a:02:30:3a:89:9c:8d:
49:48:34:7a:6e:b8:f3:65:39:bd:eb:29:ba:c9:49:3d:de:d8:
a2:88:b1:2f:d6:a6:97:e4:69:9d:7c:1d:2f:e3:9e:7d:4f:95:
c8:7f:b3:14:b8:da:23:e9:04:5c:da:37:66:84:e7:70:6b:11:
37:9e:22:4c:a3:7c:28:6d:39:31:25:a6:81:53:35:7e:e5:00:
4f:64:5d:9b:ee:96:56:6e:37:60:4e:e1:68:8e:f0:54:12:e1:
ce:52:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:33 2026 by rpki-client