Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer (raw, json)
Hash identifier: Mp+DOoY/F2vaNgnbV3wVEuubkiEay+9CVQnooPCSrL8=
Subject key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75D0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:53:21 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 104.250.32.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30160 (0x75d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:53:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:68:7b:ac:73:bc:24:0f:c0:e4:03:eb:cd:
94:5e:0f:d0:a7:2d:43:50:81:f7:76:87:d2:e1:7e:
b1:d1:3e:ea:5c:e1:ef:59:11:0c:08:19:ef:77:d8:
1f:27:47:86:0c:49:b2:c0:8a:32:5f:8d:0c:75:c0:
69:48:57:c4:b0:85:46:ce:d4:18:16:8a:09:fa:e3:
4f:ff:97:c1:5c:5e:c4:fc:32:f6:6b:b0:53:bd:b7:
43:e4:be:b9:ae:0c:6a:d9:75:f1:96:85:83:ce:d5:
98:9f:b7:10:ad:55:81:b7:84:74:09:6a:ae:28:b3:
d2:1f:41:29:12:ee:75:a2:dc:15:ea:f9:8f:d8:be:
87:07:5b:24:72:9b:4e:1f:cc:e8:92:58:5c:00:77:
e4:91:5e:d8:91:4d:21:78:dd:55:8d:bd:41:0b:60:
ac:66:d9:7e:17:d9:53:49:3e:e1:d3:96:c2:d7:b8:
85:53:65:73:79:6a:90:30:21:5d:36:82:35:9f:e9:
92:3a:fe:89:e7:78:1a:3f:1d:51:b3:5e:4c:8d:b6:
e6:b2:9a:29:a2:36:94:bd:9c:e1:97:7a:65:1e:dc:
e8:fc:e1:f8:a5:af:25:ab:14:59:e4:4a:3a:cf:30:
20:6a:55:35:d0:e3:7c:06:1c:0f:35:f3:40:9d:df:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
104.250.32.0/19
Signature Algorithm: sha256WithRSAEncryption
09:10:57:6a:de:20:eb:28:83:52:4d:1b:56:bf:f1:cc:67:ce:
fa:2a:35:d7:e6:88:e9:ca:b3:9e:75:2b:e9:f0:1e:7f:5a:9c:
15:87:41:e8:36:16:61:1e:f3:ca:39:a7:5c:27:5c:72:ca:70:
6b:4b:71:ce:0d:4a:08:96:5e:e2:9b:de:77:f0:1b:41:e6:59:
72:cf:bb:fd:7e:f6:c1:27:95:d4:9e:46:d4:7c:90:5a:80:f1:
39:b2:d0:08:2f:10:6f:16:7e:1b:b0:40:87:93:63:f0:03:03:
e9:2e:02:56:b9:df:86:54:ce:a0:0e:76:92:67:4a:b3:59:69:
6e:7d:f8:89:9d:0f:52:23:73:17:e4:99:a6:a4:72:8f:72:82:
e4:9b:27:e7:61:12:4b:77:fe:1b:be:61:b2:de:17:86:e4:2a:
fd:65:6f:3d:20:49:22:60:ce:b3:6e:04:c1:01:c4:d9:83:53:
f5:7a:ee:33:da:a5:1e:e5:92:e8:ef:49:3c:8e:a7:ed:14:3e:
6e:d1:78:f8:43:95:60:95:3f:4a:01:32:58:f7:e4:98:fe:29:
86:4d:93:c9:de:02:f4:e4:45:12:e0:d1:f2:bb:88:5f:38:b7:
9b:9f:91:5c:f6:f9:8b:18:38:b9:9d:81:3a:01:32:91:4d:e5:
77:81:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:19 2026 by rpki-client