Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer
File: WATZMgJnrePvrVaVURWF9sMl5wQ.cer (raw, json)
Hash identifier: S47mAhBJWw63FV+YWrWT8d+OgDKdcsI/q4MiV9fTNFo=
Subject key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:42 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.143.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30131 (0x75b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:42 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:5c:f3:d4:30:ba:2e:28:2a:be:bf:59:c8:
bb:3d:d5:aa:63:80:9e:a7:dd:97:5f:e2:e6:96:6f:
63:3f:59:7d:c6:81:f1:f8:ff:40:9c:09:35:48:d4:
2d:43:92:8c:76:a6:14:47:d7:5c:1d:55:e7:13:2c:
c0:b0:ac:33:ed:0f:5f:f9:6e:69:f4:fb:b3:66:72:
24:87:c7:b1:9f:67:f9:da:98:4e:bc:3a:cc:3f:32:
7a:3a:a5:6b:67:32:cc:1c:9c:93:26:4a:be:d1:d4:
3c:38:bf:63:fe:79:88:21:16:8d:a7:89:77:74:46:
69:1a:69:44:bb:9c:f6:14:79:35:2c:4c:b9:06:c7:
49:32:09:a9:30:ba:4d:01:a8:44:d5:18:4d:d2:da:
ef:ef:04:fe:9d:71:61:aa:50:36:dc:c8:82:a7:0b:
d8:fe:e9:bc:32:a9:b5:79:5c:89:14:d6:a3:b2:c9:
e5:0b:0b:fc:50:17:d5:da:01:88:77:01:1e:33:47:
e9:84:cb:a0:d4:07:e7:d4:ca:69:ca:ab:95:b3:ba:
47:5b:b8:9c:e0:e5:2d:67:34:e9:fe:fb:48:1b:65:
49:73:9a:e4:f4:66:2d:9c:52:7f:52:39:14:56:7e:
f0:00:af:91:9f:a9:b5:0a:8f:6d:e3:56:11:1f:5f:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.143.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8f:b8:eb:6d:f6:72:9a:20:32:79:38:6c:95:3e:f3:f7:98:
ad:9b:08:28:d3:b5:94:6c:6f:54:2a:c9:1d:b8:0c:59:84:8b:
3e:54:d1:1d:50:cc:92:8b:bd:3c:3b:db:4e:5d:d6:32:46:b7:
0a:f7:21:38:a3:c9:83:5c:57:85:f7:7a:29:2d:9c:c4:f0:cc:
d5:ad:20:03:bb:59:b2:e4:81:b3:34:ee:0e:c0:fb:f1:49:2d:
87:83:8f:05:90:81:e9:51:0b:ae:56:43:ed:f9:72:41:2f:f7:
72:e7:d7:2f:91:6d:09:3e:ba:86:02:20:ec:d4:fa:63:5f:ff:
62:1d:63:75:0f:16:1f:a4:5f:2a:0c:06:b7:48:4a:46:17:4a:
ae:c9:7e:5b:e4:32:01:b9:d5:08:a1:c0:0f:64:49:1c:a5:7c:
d0:7f:0b:be:fb:dd:f9:80:6c:78:b0:ad:38:ef:57:60:a3:d7:
d3:c9:4c:11:65:b5:66:89:99:3d:bc:be:78:fa:57:54:da:1b:
59:57:db:f4:d3:74:15:b5:ef:84:3b:eb:0e:33:e7:d4:e0:c3:
38:fa:23:f9:98:25:0e:4d:f7:af:05:60:a1:03:98:90:de:10:
2e:6e:8b:22:82:6d:fb:cc:d9:8c:86:6a:09:2a:bc:d3:ba:83:
43:ef:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:09 2026 by rpki-client