Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
File: OQo4N6umkSos8p5hDaSVVd8sb6U.cer (raw, json)
Hash identifier: rdNKdMLTuSryZlkgvYiFfkRjtp6QO/XaPXRj2vgNNRk=
Subject key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7803
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Mar 2026 07:44:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30723 (0x7803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 1 07:44:57 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:70:96:e9:17:0c:a9:64:47:91:d6:2e:03:
92:6d:4c:c9:df:82:8c:7a:bc:1c:32:8f:0d:54:3d:
bc:ad:07:e5:62:d0:45:c1:29:f1:a7:85:38:0e:cd:
fc:bb:be:42:60:9d:f9:81:c2:b1:76:f5:55:eb:7e:
a3:8e:da:58:61:04:42:ec:be:3f:05:cd:2c:d9:de:
89:45:67:71:63:63:e3:c5:9e:3a:d4:78:da:51:97:
27:16:a3:12:23:7f:63:4d:d2:3d:81:7c:29:45:1d:
f9:df:b0:2c:a2:6a:6e:6e:c9:8e:af:32:a3:eb:ef:
ad:08:7f:56:f6:aa:3b:39:28:1a:13:ed:ec:f4:81:
55:75:73:24:60:cf:32:5a:a2:d6:ca:15:5e:79:a3:
6c:d3:90:98:3c:54:07:d0:3c:f8:00:7a:e6:a8:f6:
a8:3d:95:22:12:e0:e0:a0:33:4a:87:d8:06:a1:f8:
e2:45:21:ad:d7:10:20:cb:f3:ec:08:e8:3e:0a:61:
a7:0c:34:7b:1e:e3:09:6f:fb:09:6b:0f:59:3d:56:
4b:ad:ec:a2:2b:80:49:9a:98:bb:9a:53:1c:67:df:
3b:65:45:ba:3b:ce:4d:b7:19:f7:d3:db:82:34:3d:
25:1f:6e:25:9e:86:14:9c:1d:a1:37:ec:e9:c1:bd:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.240.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:8a:f9:3f:b9:ec:2f:10:d4:6b:57:bc:ce:a9:49:93:d1:96:
47:e0:70:ff:f7:01:c1:66:bc:37:e4:de:8c:4c:51:e4:44:1f:
a6:48:5f:44:98:26:45:79:a4:04:fb:2a:29:26:01:6a:c5:b7:
e3:5a:45:69:24:4c:7f:28:c6:34:37:0b:2a:87:08:4f:f4:ac:
2b:db:04:37:30:f7:6b:60:51:4a:a1:c6:c2:1c:17:4a:b7:25:
7b:04:2e:9f:3e:43:e9:d3:23:be:93:43:52:6e:88:ae:79:3e:
85:67:f1:da:2d:e4:5a:4e:fa:0a:fe:d2:6c:80:d0:bf:ab:34:
c1:c0:09:11:90:63:f8:25:7f:b8:c0:64:cb:40:cc:ac:9b:b8:
5b:93:13:e9:c4:61:3e:13:81:a0:99:3b:1a:3a:34:22:8f:50:
e8:58:5b:d5:8f:62:ec:62:a6:59:2a:0d:7c:51:dc:4e:5d:bd:
98:b4:3d:39:d2:68:73:d7:4e:a9:cd:a9:9f:76:2b:6c:e8:37:
85:de:f1:e3:29:ae:1e:30:60:34:a0:62:60:97:28:a7:f3:46:
33:9c:c4:71:cc:eb:59:6d:0b:a0:a8:4e:91:ea:26:d5:6a:a7:
50:46:83:d8:90:c5:a4:25:43:27:d3:17:66:c7:60:a2:98:02:
e6:fa:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:09 2026 by rpki-client