Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer (raw, json)
Hash identifier: BaKpBWzEZ0oBThO1b9qCNPC8/+j06jydihc+BRX38dQ=
Subject key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7592
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:00 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.210.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30098 (0x7592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:00 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:d0:eb:36:db:a1:63:68:f8:12:89:5a:a0:
65:eb:24:da:2a:8e:d0:ca:49:4e:d7:50:78:85:4c:
c1:13:04:36:60:60:62:33:9c:be:43:d3:25:11:84:
58:16:7a:a3:8a:a1:e3:54:bc:47:91:72:38:9c:ab:
35:3b:67:32:90:ca:c1:1a:e6:69:85:de:aa:2d:3f:
15:2e:6f:95:79:54:9a:f4:d6:5a:a7:e6:ce:1d:dd:
8f:6e:26:47:87:50:f5:e8:75:fd:10:6e:d5:1f:cf:
66:3b:66:75:13:79:4b:94:44:0d:be:5d:50:56:c5:
b6:c2:56:95:57:67:a9:90:bc:14:b2:42:76:1c:33:
da:13:49:7f:0c:57:67:d6:76:69:5d:1d:d9:b5:09:
ad:fb:fb:07:0a:aa:bf:12:9a:9f:0d:5e:c5:64:c8:
b4:de:4a:ff:a9:38:50:13:d1:ae:da:8d:65:66:cd:
1d:ca:b0:08:c4:02:0a:9e:e9:cf:07:54:9a:fd:6e:
7a:fa:eb:b5:17:88:13:68:7f:5f:e8:b2:14:fc:df:
de:2e:27:42:47:aa:0b:2a:bc:50:8b:56:2f:3f:55:
9f:16:59:2b:32:f1:68:a1:e6:3b:ed:53:58:6e:99:
0c:91:d4:04:cb:37:07:1c:fd:ab:2a:a5:4a:52:6d:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:fe:dd:4a:74:99:ee:de:e3:82:00:5c:1d:2a:2b:1d:ef:d2:
ec:61:d1:44:21:2f:5b:74:ab:5d:df:67:5b:6d:51:f6:c9:d4:
c5:44:31:a3:60:4a:c2:83:c2:26:26:43:0a:88:0e:dd:db:b1:
a1:ed:80:d4:4e:19:7f:fb:16:92:e1:81:b1:2b:54:dd:b3:0c:
2f:1b:74:af:8e:ca:98:17:d3:84:01:36:cc:66:c3:68:da:59:
24:16:c6:f8:20:4a:ff:03:15:f8:41:07:57:21:50:c7:58:e9:
ba:5b:12:d1:91:a4:51:4b:bd:5c:b6:1f:48:dd:fe:bd:1b:01:
e5:6e:0e:29:7c:6b:58:5f:d7:f6:0f:fd:2e:2f:76:18:2a:24:
1b:86:0f:44:62:87:90:d5:83:6e:d0:8e:b8:73:74:42:68:c5:
d3:23:45:61:14:a6:26:30:7d:f9:a1:37:d2:ed:52:4a:05:e3:
2e:24:02:2f:92:0f:b1:cb:28:77:98:36:ac:03:b2:2e:d7:52:
77:e0:34:d1:07:5b:d1:04:4f:f6:d6:b6:16:37:68:b5:6f:3f:
d4:0e:13:ea:b1:7b:a1:5d:de:98:bb:8d:02:6b:eb:ac:27:ea:
10:98:15:46:9e:9f:12:0d:e8:82:f0:a4:ef:04:2e:81:9d:d2:
68:aa:5b:9a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MjAwWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzOUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIy
MkQ1MTg1QkZBNjcyMDg1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL0Y0Os226FjaPgSiVqgZesk2iqO0MpJTtdQeIVMwRMENmBgYjOcvkPTJRGEWBZ6
o4qh41S8R5FyOJyrNTtnMpDKwRrmaYXeqi0/FS5vlXlUmvTWWqfmzh3dj24mR4dQ
9eh1/RBu1R/PZjtmdRN5S5REDb5dUFbFtsJWlVdnqZC8FLJCdhwz2hNJfwxXZ9Z2
aV0d2bUJrfv7BwqqvxKanw1exWTItN5K/6k4UBPRrtqNZWbNHcqwCMQCCp7pzwdU
mv1uevrrtReIE2h/X+iyFPzf3i4nQkeqCyq8UItWLz9VnxZZKzLxaKHmO+1TWG6Z
DJHUBMs3Bxz9qyqlSlJtjgECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQk5FpGcIZe
0cUR3SItUYW/pnIIXjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzlGQkIvQkE5QTlFNjhFNDA0MTFGMEE2NjE5QzYwNjE2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM5RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNH
WHRIRkVkMGlMVkdGdjZaeUNGNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZBP0jANBgkqhkiG9w0BAQsFAAOCAQEATP7dSnSZ7t7jggBcHSor
He/S7GHRRCEvW3SrXd9nW21R9snUxUQxo2BKwoPCJiZDCogO3duxoe2A1E4Zf/sW
kuGBsStU3bMMLxt0r47KmBfThAE2zGbDaNpZJBbG+CBK/wMV+EEHVyFQx1jpulsS
0ZGkUUu9XLYfSN3+vRsB5W4OKXxrWF/X9g/9Li92GCokG4YPRGKHkNWDbtCOuHN0
QmjF0yNFYRSmJjB9+aE30u1SSgXjLiQCL5IPscsod5g2rAOyLtdSd+A00Qdb0QRP
9ta2FjdotW8/1A4T6rF7oV3emLuNAmvrrCfqEJgVRp6fEg3ogvCk7wQugZ3SaKpb
mg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:38 2026 by rpki-client