Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.cer (raw, json)
Hash identifier: JjGUOy4S/3soOw+F9zax4Q+loeyi2Y+UoBv8NGVm4Dc=
Subject key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 759B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:11 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.30.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30107 (0x759b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:54:70:3b:f5:c8:c7:74:9e:f7:cb:23:aa:
66:45:cd:44:8b:e1:c2:7a:fe:af:4c:1c:eb:04:6f:
87:b4:4c:60:6a:3f:98:02:df:8a:b8:ce:02:30:01:
ef:21:6d:29:1c:ce:59:98:ea:40:f6:45:cc:d4:e3:
2d:8f:6b:ce:1c:5a:7c:87:40:79:a8:db:67:94:b5:
db:27:37:c5:9d:d5:f6:fb:2b:0e:d3:4d:44:b9:1a:
e4:5b:52:a5:8b:ab:0f:ec:45:6f:97:dd:e4:fb:8a:
1f:9d:9a:52:c9:6c:8a:6b:ac:e3:e9:f3:67:7a:85:
0f:44:c1:8c:63:a9:df:d0:15:17:24:36:05:25:ca:
68:b8:47:a5:5f:2b:b8:9e:ac:99:98:5e:25:b0:58:
19:37:d8:31:e6:d6:23:13:99:44:70:30:63:1a:0c:
53:1c:92:38:a2:60:0c:48:ff:ab:7d:47:40:11:93:
6c:9e:f1:7b:d6:ec:97:b9:99:fb:6e:02:14:5c:ff:
e0:bc:4e:dc:56:44:70:d0:ff:b7:b3:e8:95:bb:8d:
6c:92:13:db:44:41:d4:20:cc:bc:64:9b:42:05:b6:
bd:ad:c7:d1:1f:f5:2d:09:18:9c:6b:25:b8:61:1e:
b3:c5:5b:f8:f1:5d:cf:71:b8:23:53:4d:28:54:dd:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.30.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:06:20:22:14:b6:b0:ff:27:55:3b:f9:d8:49:fd:b9:6e:79:
9e:8e:be:dc:ba:f5:28:f3:e1:71:6a:cf:bb:83:44:eb:e9:7f:
3b:46:65:db:87:4a:66:e0:5a:3b:bd:7c:22:49:ef:cc:48:88:
0c:5c:11:d0:a8:fa:79:8e:8a:b7:ec:dc:51:e9:a9:7c:3e:01:
50:98:ff:1e:cc:9c:de:5f:e0:5e:b8:bf:97:1e:a7:eb:51:bd:
dd:63:fb:15:92:4a:6a:70:9f:eb:5e:5f:c7:d6:48:4e:f6:dd:
e8:ae:44:74:9d:55:d8:7f:3e:31:06:3d:de:69:13:4b:6b:65:
30:02:1d:09:d6:29:bb:97:72:3d:51:be:a8:b2:f0:da:51:3f:
e5:69:51:91:d6:4a:72:ee:d1:61:39:d2:58:73:ce:5f:4b:bd:
5d:6c:4c:be:a9:53:72:c7:4b:3a:a0:9b:b9:30:ac:51:2c:99:
71:ad:9f:93:42:a3:3e:64:3c:9e:cd:ee:28:57:6e:4c:fd:14:
ed:93:a0:b2:da:81:20:a3:1b:0d:f0:eb:e8:85:19:89:3f:61:
97:98:99:e1:f4:c0:0f:aa:62:a9:0b:e7:57:e2:7d:2d:ef:aa:
b1:84:b8:36:54:2a:72:8c:af:ae:03:e3:18:b5:01:95:d5:e8:
be:60:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:56 2026 by rpki-client