Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
File: M3WpYTTFczGvVN1xTtNj2rMba9A.cer (raw, json)
Hash identifier: dsAJpJQvPP2wCDpKALtBQMhCwpmjZ5RVhJsFIOqQHho=
Subject key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 83E2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 23 Oct 2026 04:58:14 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.68.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33762 (0x83e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 23 04:58:14 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:c2:fc:6a:eb:98:2c:19:2f:c4:ff:56:f0:
6d:9e:d5:bd:e6:c8:c3:4d:79:6e:6b:09:7a:6a:3d:
b3:38:ad:85:cc:c4:b4:f2:e1:14:fb:b5:e3:e8:3a:
59:f1:a0:8a:f1:bd:58:1e:7e:ce:a6:31:ed:8b:51:
ba:9e:f6:a9:6a:52:bb:89:ab:34:16:32:79:49:96:
49:ac:79:06:9b:59:cc:3d:d9:5f:01:47:3b:e0:a9:
39:fa:94:9c:e6:32:3b:87:cb:df:7a:23:74:86:c5:
22:0b:df:38:28:4b:d3:85:56:b3:c9:71:8f:38:9c:
38:24:ba:af:9a:79:24:d8:b8:69:d2:3f:43:c0:4f:
33:13:3e:01:e9:84:8c:64:6b:b1:67:d9:c7:5a:76:
dc:82:9b:bc:68:e6:89:93:e2:82:8b:22:30:3f:5c:
90:88:6a:aa:75:34:ef:59:52:66:06:38:4b:63:46:
30:64:d1:39:68:3b:eb:84:7c:b5:83:91:9f:7b:73:
6f:1e:42:68:fd:4b:50:35:77:ae:e3:ed:df:c8:86:
18:68:34:bb:39:0e:b1:36:e4:64:a7:7d:bc:7d:cc:
16:20:55:48:d5:fe:15:0b:02:a4:36:31:49:ab:73:
7d:0f:25:90:a8:2a:e3:bf:ee:9a:4f:40:20:2a:1c:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.68.0/23
Signature Algorithm: sha256WithRSAEncryption
63:09:68:03:a3:c8:6c:dc:ae:18:45:65:0e:c6:c8:f5:70:e1:
2d:1c:2b:b7:6c:de:ee:3d:6b:3f:6c:b2:83:b0:17:78:8f:d1:
8f:dd:b2:ef:ca:c3:e3:86:18:d7:41:d0:af:1f:f9:4e:7d:38:
d4:27:38:ec:fe:69:8e:ab:d1:4e:9c:d7:d0:b9:89:98:74:2f:
b0:a5:af:a0:57:53:2d:c0:bd:40:2c:08:7c:ed:47:29:82:b9:
65:42:72:da:c0:8f:e4:cd:be:58:6d:f0:15:bd:b2:26:77:56:
97:d7:dc:40:b6:f2:3a:99:f9:1f:4f:42:70:1f:00:84:8d:41:
e2:db:eb:b0:33:11:83:13:15:24:d6:53:05:65:1c:08:7f:47:
78:cf:d2:4f:c1:ab:c2:68:c5:35:72:2b:cd:48:f5:b0:56:48:
98:6f:be:fb:1b:55:42:2e:e2:4b:d4:90:0e:f6:cc:8f:a2:67:
4c:97:ac:f1:71:98:9a:60:20:41:06:6c:dd:9a:56:f7:37:5a:
29:79:09:ab:0d:8b:97:0f:7a:ca:74:49:e6:64:69:fd:de:e3:
5b:3a:43:49:e5:0a:77:a0:68:4b:19:af:b2:f5:21:8e:68:c4:
31:35:06:af:ec:bc:df:a2:55:bc:3b:21:54:3c:bd:4d:78:38:
a2:c9:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:52 2026 by rpki-client