Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer (raw, json)
Hash identifier: gAUNVGtKdqs5UjwyOXXqPI2poUp1XAjCuB7tGr2XXuw=
Subject key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:58:01 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 167.179.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30398 (0x76be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:58:01 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:27:4c:14:51:7c:fb:f9:15:54:59:58:ff:
f6:c3:3e:1c:e1:13:af:01:47:aa:23:fc:14:0b:04:
f3:66:d2:05:a9:b7:af:b0:97:76:d7:e2:bd:63:c6:
cc:fb:5e:9a:f4:61:ae:2a:52:b6:b1:a9:ef:a4:9b:
8c:4c:36:8b:e6:88:0a:32:c6:3d:7f:13:9a:d9:e7:
37:3a:87:e1:36:fa:b9:86:c3:0c:f7:eb:10:97:fa:
34:1e:18:d2:1e:82:5a:91:3d:6a:3b:ac:28:fb:78:
f1:53:ac:3a:ce:f6:17:84:5b:4d:71:11:70:11:64:
9d:e3:1c:da:92:1e:49:14:46:d6:82:aa:6c:6f:24:
aa:21:b0:38:ec:09:83:6e:4a:9c:4f:ed:33:ac:9e:
98:5b:93:72:a0:25:fa:8f:58:5a:a8:cb:67:b8:d8:
8e:22:71:96:9d:05:58:c5:c5:a9:61:b7:33:f9:5f:
4b:b3:e9:d3:7d:06:e1:f4:5d:c6:64:d2:92:07:e1:
40:b6:63:49:0d:fe:d1:e7:e9:bf:cf:48:91:e0:2f:
78:6f:db:bf:aa:9a:97:a6:4a:01:63:16:6c:b5:31:
02:91:71:cc:5c:58:90:86:b4:db:4e:65:b6:7b:2f:
97:aa:8d:b7:18:c5:a9:37:de:ad:37:4c:b5:e5:33:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.224.0/19
Signature Algorithm: sha256WithRSAEncryption
52:94:3e:53:2b:7a:94:61:d1:28:db:87:d5:3a:ac:eb:b7:7b:
b6:17:9d:1f:0f:2e:31:b0:21:a6:76:b4:1b:cd:fa:b1:01:eb:
97:e5:60:19:30:5e:d7:77:7c:08:c8:96:39:b2:43:a0:9c:9e:
50:55:f8:c2:24:11:80:ff:0e:f2:0c:da:97:7e:54:ef:c8:57:
37:d9:1c:50:69:8d:01:40:c3:50:3b:da:7a:0e:ab:c4:22:c9:
f5:90:cc:a9:5b:9f:e8:1c:63:3a:0d:5a:e2:74:03:0f:45:23:
0d:8d:92:0d:65:e4:f6:8f:3d:60:61:c9:0c:99:3c:af:1a:6a:
87:03:29:c5:f2:80:65:25:f6:c2:98:08:41:bc:1b:76:40:a8:
6e:bb:33:7c:a2:18:6a:2f:f4:c0:18:60:d1:52:f9:1a:26:c3:
dc:a1:9c:41:bf:47:80:47:dc:d6:0e:04:51:29:56:09:e3:e0:
be:d9:af:47:06:2a:10:aa:7b:19:eb:30:11:c4:eb:96:64:14:
cf:7a:8b:59:33:d8:60:af:98:87:13:e3:95:1e:d2:4a:64:6b:
78:1e:de:09:19:58:05:20:c0:87:1a:81:13:58:55:94:72:d7:
9e:3d:63:bb:8c:ad:19:e5:97:eb:7a:07:46:af:89:c2:bd:d0:
2b:2d:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:54 2026 by rpki-client