Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer (raw, json)
Hash identifier: EHPc4nmp2RBItxnULsWr5gUi4N3U2kHjv/EIQQHwW44=
Subject key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 794B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Apr 2026 14:07:28 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 45.74.248.0/22
IP: 128.185.0.0/16
IP: 136.185.0.0/16
IP: 152.52.0.0/16
IP: 157.85.0.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31051 (0x794b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 1 14:07:28 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:00:7c:60:bd:28:69:da:69:8d:a0:72:be:
aa:0e:fb:18:4a:e1:f2:42:c4:1f:6a:71:f5:3b:82:
b4:ee:c9:f8:ac:fa:79:da:fb:49:4b:d6:b2:f3:4d:
28:48:0d:7e:e4:d3:aa:d2:79:81:2a:d9:5b:5c:16:
41:ae:3e:12:2e:62:d2:32:13:b2:8a:e7:38:cd:48:
4b:f6:77:fe:27:46:33:5e:4a:98:e2:c2:2c:d8:2c:
12:b9:94:d9:28:0f:75:02:c6:ee:69:32:a1:ce:ca:
65:2f:22:34:4f:ae:29:ac:d5:ce:ad:ab:9e:ac:54:
43:eb:db:df:ee:fb:0a:32:cc:35:c2:01:ca:6a:90:
d0:a1:c8:d8:9e:e7:90:f7:ae:8d:b0:20:ee:ac:eb:
fd:06:d7:fe:8c:06:62:45:55:c0:d9:02:0a:d3:e5:
a8:29:bb:75:d1:57:ab:35:82:49:b2:57:5f:01:3d:
8b:e7:bd:5c:67:02:c4:54:99:b1:48:c8:df:b8:0b:
71:e4:0a:71:2b:b7:4b:22:6f:68:fb:00:7c:c7:53:
34:d6:51:81:3b:b2:20:38:a9:28:44:4f:a1:c0:ba:
59:7d:68:f1:b9:3c:8c:d5:a2:99:3a:d6:e7:b4:45:
ac:59:77:49:87:39:04:e5:75:67:07:d9:b2:20:b3:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.74.248.0/22
128.185.0.0/16
136.185.0.0/16
152.52.0.0/16
157.85.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:ec:24:89:25:4d:76:e3:f2:47:f6:19:4a:cb:eb:d4:f9:f3:
7f:0b:98:ff:9d:bd:63:1b:80:a3:00:40:c9:5e:df:33:f2:84:
5e:58:37:f6:2e:7c:b8:76:a9:5f:d3:ab:bc:8c:70:6d:28:5a:
3d:81:81:f9:c6:13:1d:ca:0b:98:a9:dc:47:5e:9d:74:23:48:
df:1a:c2:1f:f8:c8:58:20:d3:44:2b:00:70:5c:07:9d:65:c6:
e6:b8:72:56:42:ec:04:a3:7b:fa:98:a4:d6:f4:29:f7:52:17:
0b:64:cd:bd:14:e3:29:2e:48:4e:72:d0:06:c4:5f:12:24:db:
15:9d:e8:aa:41:a6:12:26:4b:9a:65:8e:13:29:6f:fe:ad:25:
c9:bf:1a:d4:c6:71:c7:2d:e9:11:91:37:02:33:7d:d7:bd:85:
43:55:6d:1f:85:91:6c:44:be:e1:1e:6a:9f:26:54:1c:ba:e5:
59:e8:5a:61:3f:29:30:d8:03:ce:29:32:11:dd:f7:fb:52:eb:
74:79:60:de:31:4c:67:2e:6d:f9:07:bd:e6:34:29:76:aa:c0:
e5:b0:d3:9f:2b:cf:1d:80:49:f5:64:46:f2:2e:77:56:a2:bc:
74:9d:e6:e2:82:55:9c:cd:a8:a0:1c:4b:10:c7:83:ca:e2:38:
78:d5:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:13:18 2026 by rpki-client