Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.cer (raw, json)
Hash identifier: Z2TqRA1ovpmsvUubBPtac8xSNqBAtiR6f6GgZlwOcHc=
Subject key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 757D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:35 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30077 (0x757d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:ab:35:61:61:ca:09:86:2b:0c:0a:a9:2e:
9b:af:cd:d0:45:ba:37:0e:3b:f8:ab:61:b2:a3:8f:
1f:59:11:0c:a8:3c:ae:7e:40:20:42:ae:01:e0:dd:
95:81:86:a4:c3:ff:32:dc:2e:ce:bb:18:ec:98:38:
91:b7:74:d1:b6:07:9d:ae:2d:c3:9d:81:df:cc:60:
76:78:2d:c0:f6:76:74:7e:95:7f:e0:00:5f:7f:25:
83:c9:8c:3c:87:6c:87:d8:65:f8:a1:f0:a8:ee:ae:
a2:c3:3e:e8:97:ef:d2:cd:6e:fb:9d:91:15:65:45:
e1:b6:38:1b:1b:32:18:f8:d1:61:b4:46:69:47:54:
1f:57:12:d8:f8:2c:bb:60:fe:8b:f7:6b:58:81:2c:
00:91:bc:0e:be:61:c9:84:0d:06:f8:f7:67:c0:e2:
e8:35:03:70:f2:57:13:2b:f3:e9:d5:a0:d7:19:ac:
94:b7:4e:b8:69:6f:d0:00:8f:c9:24:5c:21:69:2d:
87:a4:03:5d:0e:66:34:9e:d9:04:8b:4e:97:c8:72:
05:40:d7:ba:b6:c2:e9:99:b2:af:49:8e:0b:c0:ad:
9f:e9:3d:a2:a1:c2:ff:cf:8d:9b:a8:b4:a5:c0:73:
1a:82:86:e2:85:e2:3d:92:a2:f6:10:26:93:e5:b0:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.224.0/23
Signature Algorithm: sha256WithRSAEncryption
be:9b:ea:db:97:81:cf:72:1f:47:30:7d:2e:f2:80:a9:d6:a3:
1d:5e:4a:2e:61:a7:9d:a6:f6:41:75:0d:37:94:14:34:13:24:
50:3b:4c:49:10:23:96:71:c0:40:9f:be:39:c7:e6:c2:d3:05:
cc:a7:ef:67:54:6d:88:57:7a:dd:31:2d:e2:6e:3e:d9:f1:28:
87:ee:06:3b:30:64:f6:d4:84:fb:6f:6f:88:ec:ba:65:8f:a6:
e7:0e:51:eb:3a:25:51:6f:01:fe:8e:a0:75:00:b2:02:51:a2:
58:76:44:3d:ba:a1:29:ac:77:aa:19:b6:a8:04:d6:09:a5:0b:
45:f5:46:d1:7e:d6:83:c9:99:a1:e0:a3:a0:a3:91:98:9b:5a:
5b:d1:6a:5a:47:1a:ee:e8:6f:2d:3b:05:0f:c9:72:0e:c2:15:
75:4f:fb:e8:14:48:65:c3:72:ec:c5:fa:a7:09:c8:4d:14:fa:
38:9b:4a:fe:d6:ba:00:1a:41:18:4e:d6:55:de:cf:3e:9e:58:
fa:fc:82:2f:70:a8:b7:7b:9c:e1:5a:9a:5f:f1:bb:e0:66:95:
a1:96:cd:f6:a6:f9:13:72:3a:19:3a:2e:02:fa:d4:6f:de:7b:
56:28:1a:3f:e8:33:24:b2:9a:ba:fe:fb:38:c7:70:c1:85:7b:
82:bb:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:29 2026 by rpki-client