Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.cer (raw, json)
Hash identifier: 9QTpyjwvFHNXoF1OO5bfVVfHb5nrpC27hhEBEXnmkiI=
Subject key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76A6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:33 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.145.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30374 (0x76a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:33 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:fb:2d:a3:6a:10:39:b8:3d:4b:90:18:92:
73:4d:ac:82:03:3b:d8:cc:37:09:27:12:3b:c1:4a:
41:5b:2d:65:19:aa:57:b0:bf:fa:27:fa:60:ec:9d:
52:1e:f9:ef:2a:4c:e1:ff:55:4c:3f:f7:1b:63:de:
12:42:77:6d:59:26:e1:e7:a9:54:e2:fc:4d:c0:a7:
80:b4:3e:6f:62:b5:82:bb:10:d7:7f:60:e7:29:db:
ba:d7:61:19:89:c2:e5:06:5b:bb:74:3c:1f:6d:2b:
18:d7:42:82:f9:bd:bd:32:da:1f:ce:3a:4d:dc:62:
0f:91:80:53:7f:05:b5:d2:9d:81:29:a7:15:8b:c3:
9e:c0:ba:04:11:2a:13:04:de:ef:85:f4:93:10:34:
e2:51:84:20:a5:8a:92:17:ed:a8:99:7c:c1:4a:b7:
5a:d1:ad:ea:2a:22:8d:09:cb:54:1c:0d:c3:3e:e4:
77:8c:c6:08:ec:2d:e9:c6:ef:01:e7:bd:c6:63:29:
a0:45:21:b6:a1:f9:f0:8f:41:28:17:be:c6:68:cd:
ef:d0:77:b6:23:18:6d:6e:ee:55:40:3e:2f:0c:a7:
81:cb:d3:2e:26:d9:d6:3a:61:19:3a:da:f4:27:af:
54:00:56:1b:aa:ec:af:6d:37:7a:d0:0b:10:23:23:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e0:d5:d1:e6:98:0c:f1:ab:7c:78:48:6d:a3:cd:25:63:c6:
5e:48:d3:3f:c2:7c:5d:f9:06:2a:06:07:9f:02:1f:f7:f5:62:
81:63:88:f9:63:cf:4f:fd:f5:9a:2e:98:89:c2:91:3e:46:3d:
19:86:a0:9b:7c:14:99:4c:9f:c3:3a:34:2e:40:d7:bd:41:19:
9f:63:a2:6f:4e:c0:00:36:42:2d:9c:95:b2:a1:f1:3a:25:40:
33:58:8f:e2:8f:b3:ba:fe:e8:8e:88:94:b6:c4:e1:bf:d7:9e:
81:97:17:d0:a8:6b:2e:76:96:0f:26:c8:55:2d:5c:5b:a5:71:
79:c9:00:ff:2d:43:20:52:23:9d:0d:02:23:40:7f:9f:b8:82:
64:fc:41:5d:5e:f2:d0:44:fd:3d:8c:f3:fc:12:ce:33:96:ca:
33:01:6e:45:a3:d0:93:b5:63:62:39:58:8a:76:b9:59:0a:3e:
5a:9a:4f:03:dc:f8:6b:0d:68:59:ad:be:a2:11:a2:25:23:7e:
ee:bf:d5:4a:e2:65:92:03:e0:2b:89:ef:67:58:dc:d2:20:e0:
81:e4:d7:41:69:9b:a2:3d:2b:c8:04:28:da:cb:5f:fe:ec:7a:
ee:5d:69:4d:cf:fd:e9:13:ff:88:0b:33:44:30:a6:56:2b:e0:
e4:b5:68:30
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1NzMzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1RDhGMzExMC8GA1UEBRMoMzJDMDIxMzExQjYyRkU0NTAwQkM4RTRF
MEY0ODUyQzY0QkM1REFDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALiL+y2jahA5uD1LkBiSc02sggM72Mw3CScSO8FKQVstZRmqV7C/+if6YOydUh75
7ypM4f9VTD/3G2PeEkJ3bVkm4eepVOL8TcCngLQ+b2K1grsQ139g5ynbutdhGYnC
5QZbu3Q8H20rGNdCgvm9vTLaH846TdxiD5GAU38FtdKdgSmnFYvDnsC6BBEqEwTe
74X0kxA04lGEIKWKkhftqJl8wUq3WtGt6ioijQnLVBwNwz7kd4zGCOwt6cbvAee9
xmMpoEUhtqH58I9BKBe+xmjN79B3tiMYbW7uVUA+LwyngcvTLibZ1jphGTra9Cev
VABWG6rsr203etALECMju9MCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQywCExG2L+
RQC8jk4PSFLGS8XayzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ4RjMvQzU3RjIzQUU5QjA3MTFFRjgzN0VBMDEyQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVEOEYzL0M1N0YyM0FFOUIwNzExRUY4MzdFQTAxMkM0RjlBRTAyL01zQWhNUnRp
X2tVQXZJNU9EMGhTeGt2RjJzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKC/kTANBgkqhkiG9w0BAQsFAAOCAQEAx+DV0eaYDPGrfHhIbaPN
JWPGXkjTP8J8XfkGKgYHnwIf9/VigWOI+WPPT/31mi6YicKRPkY9GYagm3wUmUyf
wzo0LkDXvUEZn2Oib07AADZCLZyVsqHxOiVAM1iP4o+zuv7ojoiUtsThv9eegZcX
0KhrLnaWDybIVS1cW6VxeckA/y1DIFIjnQ0CI0B/n7iCZPxBXV7y0ET9PYzz/BLO
M5bKMwFuRaPQk7VjYjlYina5WQo+WppPA9z4aw1oWa2+ohGiJSN+7r/VSuJlkgPg
K4nvZ1jc0iDggeTXQWmboj0ryAQo2stf/ux67l1pTc/96RP/iAszRDCmVivg5LVo
MA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:14 2026 by rpki-client