Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
File: PDiOKfqhof7qOJefIG9GaK2oyJ4.cer (raw, json)
Hash identifier: zDzitybSW0cBwgoLWYQYD+ZQoAAuzBUrJRZ/6+7tV4Y=
Subject key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7929
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 15:00:09 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 66.226.144.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31017 (0x7929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 31 15:00:09 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:d8:37:48:4e:e9:7f:a3:f8:d3:ca:80:73:
56:3d:bf:bb:99:58:e0:d3:5b:8c:7b:76:71:49:22:
f8:61:be:1e:f1:2e:c2:69:aa:7d:4e:59:57:ee:2c:
54:b4:6f:3b:39:5b:17:21:d8:c2:53:9f:0e:0d:4b:
e7:e2:d5:93:fb:aa:90:b3:3f:ae:c8:36:82:c0:1d:
c7:a5:3b:b7:2a:bf:aa:7f:31:9d:3c:6e:f4:f7:ae:
17:8b:0f:ab:e7:91:cb:22:1c:22:a2:88:0c:5d:32:
1f:30:7f:95:1c:5e:f2:57:0c:66:eb:67:91:28:75:
77:8c:e0:39:22:42:54:8a:52:ed:f7:2c:14:33:c0:
bf:74:f1:65:b8:be:e7:cd:7e:d6:34:42:eb:6e:e1:
5d:34:0c:ef:63:8d:37:6d:21:f4:e8:10:c8:ef:f3:
9e:3a:65:4a:dd:8a:e4:3b:46:3c:3b:e6:de:44:6b:
e8:3f:f5:00:46:30:12:22:19:a3:8c:58:36:f8:3f:
4d:e1:22:45:73:b3:ae:9a:e6:16:6c:7a:05:84:c8:
5e:30:df:54:44:1a:8a:d5:27:bb:d5:50:13:2d:f2:
47:96:bd:5b:e3:7a:27:f5:9a:64:f3:e4:15:e0:26:
04:fa:5f:99:b1:59:0f:aa:e7:f8:78:fe:b1:3e:7e:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:89:b0:ce:d4:e5:43:fc:dc:1b:1d:59:d2:3b:14:7c:21:04:
12:dd:65:56:e1:7e:33:ae:57:3a:8c:38:03:06:de:3a:c5:14:
17:8d:bb:04:68:cd:7d:59:d1:6a:c6:e5:48:0f:96:f8:94:96:
79:aa:ab:ac:b1:51:fd:8b:af:38:97:0e:fa:d4:be:37:dd:14:
6b:24:26:e6:7e:a1:4c:a1:a3:3b:d4:7c:2f:b0:4d:02:99:23:
f4:00:1f:d5:15:e1:53:47:0f:dc:74:a6:0f:2e:f3:52:3c:14:
fc:e8:98:71:95:1c:82:38:e2:12:58:30:77:2c:d6:8e:4a:dc:
66:6e:95:11:f2:2d:6a:29:6d:17:59:bc:0c:aa:f6:5c:c0:74:
33:4e:73:38:80:0a:e8:8d:60:d0:3c:c0:86:3c:e2:39:15:87:
01:ea:85:90:0b:52:19:f4:9e:02:8e:be:97:38:1e:49:ed:8f:
85:8f:d1:3b:be:69:85:18:98:33:f0:91:44:4f:ac:d5:7a:c0:
fe:66:08:54:26:d1:36:e5:ee:5b:93:4e:c9:ac:4a:b5:f6:e4:
19:85:4a:9e:fd:19:f2:9f:bc:7d:a0:b6:22:7a:f8:d9:2f:ae:
95:90:b7:74:33:c4:4c:f8:d6:bc:41:22:ad:8f:4c:3c:02:35:
74:be:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:39 2026 by rpki-client