Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer (raw, json)
Hash identifier: QiRsVp2JXBX/estOJoJTjIb/imfu5NwdGlNN6vuES/A=
Subject key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7547
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:23 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.70.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30023 (0x7547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:ca:72:9a:ad:41:eb:a0:04:4b:7b:76:4c:
b2:a1:64:de:8f:ff:09:f3:0e:74:4d:ec:6c:55:e5:
a2:e1:02:b1:9b:33:ec:ee:5b:4b:e1:38:fb:02:3b:
bf:b7:99:85:72:7d:4f:fb:6d:12:c2:4f:93:34:a5:
73:23:8f:0e:08:31:02:db:95:dd:ea:63:d2:b0:ca:
13:39:20:8d:3e:a4:f1:1e:35:6f:97:0b:55:60:31:
a9:f2:cd:e2:39:7e:5f:0a:1d:12:d9:1f:9d:ca:d3:
2e:27:f2:54:f3:4b:af:70:f9:f6:d3:69:ce:b5:69:
e4:51:03:85:57:b0:73:78:82:65:48:9d:a4:90:b3:
44:11:46:7e:0d:45:c4:37:9f:65:7c:38:30:69:bb:
c0:1d:65:9d:67:a6:09:50:3e:9a:1d:36:02:41:da:
99:15:d8:80:c7:4e:0a:e0:50:be:e2:18:de:05:8d:
9e:21:f0:94:64:54:86:24:16:a2:7c:02:a3:7e:5f:
0d:61:e7:33:1e:32:d7:83:a2:07:01:36:c2:c7:3f:
04:25:f4:6b:20:27:c8:74:2d:cc:13:63:97:6f:da:
74:06:83:a8:aa:e0:f2:87:f2:f6:20:95:b1:68:7d:
cb:ef:49:8a:9a:ea:a9:77:61:a6:da:88:fe:0b:72:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.70.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:7c:da:c5:b2:80:23:60:df:73:e2:f2:08:c9:23:3d:0a:64:
37:cb:5e:c4:10:d2:09:9e:1b:8e:ac:a7:e0:63:95:83:b7:66:
92:46:3c:42:c1:8f:25:b0:4f:a3:b8:9c:9a:bb:60:a3:5b:ae:
a0:a9:16:19:b9:50:f2:9d:d4:8d:5a:95:2e:36:79:46:4e:2c:
e1:32:88:76:eb:4a:b8:1c:dc:3c:ab:ac:28:06:7a:f9:c0:9d:
3b:49:72:0f:39:92:3c:93:15:e7:03:3f:c2:69:e5:61:33:3e:
00:3d:0b:e1:c2:60:1b:47:0c:81:a7:32:22:97:2c:11:f5:02:
a4:7f:e6:08:dd:a6:9c:80:56:be:f2:63:09:b6:d6:25:c3:b9:
d2:35:be:bb:1d:9e:6d:17:56:c8:72:d0:90:60:f1:7b:d0:98:
59:d4:d2:98:0f:ef:19:d2:01:f7:cc:ab:c1:67:fd:5d:bb:8d:
7d:df:13:d7:9d:82:11:95:2a:e0:35:8d:e1:bd:d4:41:7b:d3:
81:5a:40:6d:d0:48:cf:86:04:62:b2:e2:d8:47:97:95:66:67:
9c:3f:30:73:80:1b:b2:f1:da:12:5d:0c:b3:e6:a6:97:f7:63:
92:59:2b:00:58:48:35:32:4f:1b:59:73:4b:6c:02:85:7c:b1:
dd:c5:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:21 2026 by rpki-client