Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
File: TKAuwRGHSuDn0FVaJf8zAvkS64w.cer (raw, json)
Hash identifier: FitMOUEWM15mk/+0efR+dXxdQLjnLFFVsJKEQ0+DNhI=
Subject key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 779B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:01:48 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.162.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30619 (0x779b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 03:01:48 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:38:2d:31:aa:5f:79:2b:9f:50:00:7c:6e:
24:1e:c8:ad:fa:b7:30:6c:65:bb:b1:3e:70:a0:f3:
d9:79:a1:bf:0d:02:46:9e:b7:c0:47:be:49:60:3e:
dc:63:a5:27:ae:92:25:90:36:12:05:5a:a7:2a:3f:
9b:e0:a6:20:38:e1:6e:d8:5b:ea:61:e3:72:af:31:
e3:fb:27:70:ec:55:c1:82:ee:73:9f:68:b4:d6:ae:
83:9e:fb:0f:cc:23:78:e5:a2:29:d9:85:1a:d8:ec:
f8:0c:b0:d4:4f:6a:6b:de:0e:26:d4:1f:b0:6b:46:
37:db:4e:0e:b7:dd:9e:05:d4:aa:b1:04:ed:8f:df:
a5:b7:f9:63:e3:5c:32:b0:c9:ca:84:9c:4c:2d:17:
67:59:80:7c:64:91:4b:63:ce:b6:2c:bf:50:a1:86:
6a:13:76:9e:ea:a2:60:a5:cb:f1:9a:17:56:fd:08:
6a:57:0e:48:a9:a0:3e:92:c7:9c:1a:8a:48:17:50:
0f:69:ca:92:65:5f:2b:ad:10:10:7a:3b:81:df:24:
c3:33:f4:d5:54:94:ac:80:e1:4c:99:d3:31:93:69:
f1:3e:70:5d:f2:ea:fb:da:0b:90:be:f7:ea:af:98:
25:7c:91:f1:67:5c:35:c0:62:9e:3e:7e:5b:7c:65:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.162.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:ec:48:c2:14:af:c0:58:ad:7b:41:07:c5:ad:d7:2d:76:fb:
95:b9:77:33:47:17:27:94:45:02:8a:43:49:d0:af:cf:ba:5d:
c4:cf:36:21:52:71:4d:f7:89:36:9f:e0:15:c1:30:bd:d2:30:
94:5f:1c:7f:68:84:5e:95:18:f6:72:78:a8:02:da:47:54:19:
69:2b:06:01:31:e6:d6:3f:8e:30:1d:a8:29:48:57:6c:61:d0:
89:32:44:1b:7a:ad:06:04:83:ad:5b:5e:df:00:d1:c0:50:fd:
d9:d0:24:cf:3e:cc:2c:c7:9b:56:c3:72:e3:8f:54:a8:e5:dd:
43:63:f6:f1:54:e9:59:51:3a:dd:3c:44:73:d2:6a:fe:b9:38:
89:ce:a2:87:40:c2:ed:04:4f:ca:82:20:b1:5e:0e:ea:6a:99:
15:4e:f8:c1:48:64:b3:bc:77:bf:c1:3a:02:61:70:cb:76:e0:
b0:bc:cf:9d:e6:0a:84:29:dc:c8:d3:92:ac:fa:e5:d0:33:9d:
e9:74:4e:91:13:11:bb:f5:56:77:2f:6c:93:5f:0b:f9:16:5a:
07:e6:f7:ef:55:9c:44:59:49:63:0f:e5:3e:a9:ce:89:ef:3f:
ab:a7:b4:91:f9:ed:4b:45:14:e8:c1:f9:ce:d3:07:a6:af:bb:
89:2e:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:36 2026 by rpki-client