Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
File: PzbQyAdues-oPQS3IwcXKogp1bM.cer (raw, json)
Hash identifier: 03Vx4IfvPFl0WEz2CIxBbaGiUlkaanzY8LhwXfhgsHM=
Subject key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 768A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:58 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.138.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30346 (0x768a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:58 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:e0:9b:b1:ff:10:44:da:47:6b:b7:ab:05:
5e:b8:b0:3e:4c:48:1d:3e:13:97:6f:50:75:d5:63:
cb:2c:48:01:ef:11:63:4f:1a:27:2e:46:4f:a1:2a:
d2:72:69:24:ec:1d:e7:f6:f8:de:de:28:26:f1:93:
53:1e:61:00:71:96:04:e4:a2:c6:e5:ea:2d:2c:04:
d3:7d:9a:45:f0:5b:66:fa:e1:f0:e8:2b:b1:fc:1a:
9b:df:53:93:37:df:54:8e:7c:13:ef:be:be:91:93:
b4:3d:a0:24:ed:6d:bb:a1:7d:84:74:6f:58:5d:5a:
09:c4:d1:e6:f6:c0:ac:7e:0d:4c:0e:bb:ef:52:2d:
0b:a8:c6:89:0a:7e:88:e5:4d:da:10:b7:19:ec:0d:
41:6f:ff:19:02:7c:dd:8d:9f:74:3c:c8:1d:4a:4c:
02:99:69:01:ed:f3:85:01:d8:26:f4:6f:32:b1:b9:
28:03:8b:b9:6e:35:ec:e6:78:ba:1c:b2:44:96:67:
28:4a:89:74:f1:1b:b5:30:dc:ab:38:21:b5:0c:0a:
94:c5:a8:90:12:4e:5d:12:85:a6:76:52:da:b9:72:
1a:d9:1c:09:0a:f8:0c:53:d6:ab:9e:d9:4e:53:e7:
8c:c3:9f:96:27:0d:a1:1e:91:1f:6f:c4:2b:63:ec:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.138.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:c5:79:c4:e3:4d:5c:f3:ba:95:bf:40:a4:6c:ba:ed:e8:aa:
a4:39:b8:d0:bc:fc:f8:34:4a:f2:d5:74:18:d9:f8:91:17:f4:
60:5b:d5:ac:f5:ac:ce:69:01:f5:23:0c:85:47:d1:8a:4b:bf:
bf:84:20:50:68:22:78:4a:77:ea:82:08:42:a3:13:6b:c1:0e:
3a:24:ca:56:35:89:50:ad:1e:7f:97:ed:3d:b2:95:36:46:0b:
3a:a1:e4:92:d9:fd:cf:7d:82:85:c2:99:5e:0d:f8:ab:bd:d9:
20:06:13:07:db:4f:b5:f4:84:7a:fc:d9:ac:08:68:58:3c:05:
96:25:37:91:6f:b3:0b:78:54:61:8f:9e:5f:58:55:7e:79:47:
80:a8:c3:ee:57:30:bc:ed:b5:12:0a:16:31:be:d1:5d:cc:12:
1d:8c:da:db:00:e9:e8:b8:f6:d2:76:59:53:eb:c0:f8:7c:b4:
5a:35:38:fc:bf:46:0b:5b:0e:6d:e9:2e:69:6b:ff:1f:25:03:
12:23:64:b4:18:ae:42:65:10:e7:5c:39:3b:bc:69:de:ba:a6:
26:62:34:0e:14:c7:8b:39:e6:2e:b8:79:19:d6:9f:38:e6:cb:
63:b9:1e:d4:e0:94:5b:08:7d:71:a3:19:63:93:9b:3f:88:5e:
aa:0c:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:33 2026 by rpki-client