Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
File: MayWR8f4cKZrot54hUTNjDJr3_k.cer (raw, json)
Hash identifier: 2rxW+axEU9WkNDE9WXBApIeYIUBMHN9zXhaj9jTovyU=
Subject key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7542
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:16 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.30.209.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30018 (0x7542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:16 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:72:ea:1b:b3:d6:3c:8e:23:56:b4:25:b5:
0e:fe:7c:10:2d:d8:f4:ba:61:71:a3:ae:4a:3e:cb:
c7:96:c7:ed:2e:1b:5f:1f:79:21:d6:30:1f:41:36:
1b:43:ec:ed:ac:5b:9b:e5:7b:fb:88:92:06:dd:2a:
0e:95:66:d8:71:3d:fe:6a:26:61:4c:f7:af:00:fd:
fc:b0:f3:58:9f:3e:67:ff:44:b9:35:d1:f9:a1:f5:
0a:b3:3f:83:a0:a4:8a:9d:e7:4f:b8:2b:82:90:a6:
4e:1d:f2:c9:e8:a7:e2:2d:eb:f4:ff:88:8a:fd:c8:
35:dc:2c:0e:30:cd:d9:5f:1d:e3:0f:73:58:38:29:
d5:87:2e:38:98:a9:58:17:3e:40:c1:77:05:d0:80:
8c:45:75:6a:ca:ef:69:2d:72:89:02:64:4a:ac:92:
46:3c:6b:6c:99:b2:17:5f:7c:39:92:f5:27:4b:04:
04:e8:82:2b:4c:d8:2c:7c:a4:75:3d:6b:0b:9c:07:
10:92:e3:fb:54:7c:b8:fa:8e:9f:81:67:2e:e3:ce:
ea:58:83:e9:5e:a7:7c:38:4c:b7:61:9a:b8:ad:23:
04:0a:54:19:6f:58:33:69:60:96:e2:38:bc:dd:8b:
4c:a5:e5:e6:18:c2:e5:24:4f:5a:2b:cf:22:50:6e:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:06:fa:e3:99:0d:26:79:1f:66:b0:10:26:3e:27:e2:da:01:
55:d2:b7:a9:b4:16:54:17:b9:24:e6:a3:7f:4b:b4:ce:53:b5:
a3:41:40:bd:87:4f:a4:eb:75:c9:3f:f8:84:72:da:98:f1:81:
02:4c:eb:56:ad:f2:76:a4:ec:e3:e4:df:8e:a6:be:99:f7:7a:
9e:98:d2:23:45:c9:a0:d1:5f:61:9e:82:5c:ee:1d:b8:64:c2:
95:bc:ff:bb:e1:c0:ba:a8:b0:ef:12:78:ba:f2:b0:3a:52:09:
a3:c9:8c:ed:4d:81:69:46:a9:97:8c:d2:da:ce:bc:e2:c7:64:
79:8e:2b:8e:96:3c:38:b4:2a:db:9d:22:7f:7b:b3:ef:78:5e:
bf:dc:81:8c:99:4a:63:0a:6c:fc:5d:1b:9a:9c:61:58:45:13:
e8:93:2b:7f:c7:c9:a4:d1:01:83:23:e1:56:c8:26:25:be:2b:
15:3d:cc:cd:e3:08:37:a1:7e:ac:41:b9:74:f4:a3:79:c0:59:
8d:7d:18:71:be:f9:0e:21:91:9b:fd:39:99:61:38:9e:7b:df:
01:ba:ac:57:7e:5a:20:0f:62:da:53:31:4d:3a:12:62:d1:b8:
27:97:99:53:53:4e:69:d5:ca:68:c4:8f:d5:ae:16:ad:5d:28:
1a:90:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:47 2026 by rpki-client