Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer (raw, json)
Hash identifier: UGCYUGuupJx9GX/JtVv4svgrIfROCBZErLyGTbxd2kk=
Subject key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 756E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:15 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.188.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30062 (0x756e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:15 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:3a:74:94:94:61:d9:6b:31:10:1b:c8:8d:
f0:fd:84:81:0c:44:59:3f:3a:f3:39:f9:f8:9a:da:
01:33:1b:10:97:fb:a1:05:48:79:1b:4e:e9:3d:32:
eb:83:b5:e2:f0:4a:1a:3c:ef:bf:e6:f3:6a:e1:88:
9d:85:b2:ac:20:01:63:7e:d5:5f:61:29:9f:08:91:
b4:00:a9:bc:c0:32:56:67:40:d8:ff:2f:33:cf:fd:
7b:65:80:08:f0:ef:2c:3e:2d:55:39:64:f7:fc:c2:
2f:f3:e3:c1:df:e3:4c:39:d7:b1:65:1e:0f:ae:ec:
97:3f:d8:b3:ac:ac:6f:8d:6f:3a:d2:8b:fe:06:61:
fc:fa:0b:72:e6:08:ec:cf:cf:6d:fc:eb:f1:7e:a2:
0b:32:f4:e5:1c:db:81:c2:ea:e7:ba:62:6e:21:0f:
75:2d:8e:4a:bf:c2:a5:1d:89:81:bc:21:9e:6d:59:
ae:b1:c1:9a:90:f0:72:7b:7b:47:54:a5:70:b7:ca:
5d:cd:64:f3:1b:88:0d:9a:a8:d0:2d:f2:11:32:83:
b5:2d:d3:c0:a9:4d:b5:45:1f:ea:29:6a:31:fe:94:
7e:2b:40:1e:a6:62:df:42:a1:fe:27:c5:97:b9:93:
cc:73:e4:b8:92:05:e7:f3:40:72:2b:f3:7f:95:13:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:f4:55:db:74:19:48:f5:4b:e2:d1:d5:a8:e1:3c:ef:5a:ea:
2d:9b:6a:3e:a6:1e:72:3a:52:b8:4d:56:99:85:e2:62:dc:15:
ef:ef:7e:e4:d8:d4:79:0e:ef:d9:71:a7:b2:cd:58:a1:49:42:
50:e6:a9:5d:19:df:df:84:20:af:9d:20:49:40:f9:ff:3a:e4:
42:9b:b0:eb:3b:ec:2a:d5:5e:b3:11:96:e9:ae:af:ec:fd:0a:
d9:4c:c2:cc:4c:ee:7b:17:79:5d:d3:07:88:a8:2a:63:58:bc:
ef:2b:ac:ff:03:5a:a5:ea:58:83:ba:7e:c6:21:88:ae:c7:62:
44:e2:09:7d:bc:ee:94:3a:af:4d:38:39:ff:4f:3f:eb:b0:5c:
fb:f0:ec:7b:e7:b1:15:aa:35:d8:70:e1:d1:f3:c3:fc:87:c3:
e7:ec:ef:73:33:ce:81:a3:8c:52:c9:0b:a4:87:5d:04:92:0f:
2d:52:0e:77:23:3e:6c:61:b2:f1:2f:b9:e4:7a:98:b6:3c:5e:
22:3d:73:3c:23:fd:d6:af:4b:d8:43:57:d7:52:6d:bd:92:0e:
11:bf:1f:d9:7d:22:e9:99:65:79:8c:be:53:8b:bd:5d:21:81:
7d:09:22:47:47:13:7e:f7:87:3f:83:44:20:73:a5:f0:ad:4e:
04:97:b9:88
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MTE1WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThF
QkM4MUYwNjI1QjI5MzE2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOE0OnSUlGHZazEQG8iN8P2EgQxEWT868zn5+JraATMbEJf7oQVIeRtO6T0y64O1
4vBKGjzvv+bzauGInYWyrCABY37VX2EpnwiRtACpvMAyVmdA2P8vM8/9e2WACPDv
LD4tVTlk9/zCL/Pjwd/jTDnXsWUeD67slz/Ys6ysb41vOtKL/gZh/PoLcuYI7M/P
bfzr8X6iCzL05RzbgcLq57pibiEPdS2OSr/CpR2Jgbwhnm1ZrrHBmpDwcnt7R1Sl
cLfKXc1k8xuIDZqo0C3yETKDtS3TwKlNtUUf6ilqMf6UfitAHqZi30Kh/ifFl7mT
zHPkuJIF5/NAcivzf5UTI70CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRe/emMT7+N
EYe2hY68gfBiWykxYDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTlDRkYvMjBCRTFBMzBEN0UwMTFFRjhCMTczRDJGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk5Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1f
alJHSHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH4vDANBgkqhkiG9w0BAQsFAAOCAQEAovRV23QZSPVL4tHVqOE8
71rqLZtqPqYecjpSuE1WmYXiYtwV7+9+5NjUeQ7v2XGnss1YoUlCUOapXRnf34Qg
r50gSUD5/zrkQpuw6zvsKtVesxGW6a6v7P0K2UzCzEzuexd5XdMHiKgqY1i87yus
/wNapepYg7p+xiGIrsdiROIJfbzulDqvTTg5/08/67Bc+/Dse+exFao12HDh0fPD
/IfD5+zvczPOgaOMUskLpIddBJIPLVIOdyM+bGGy8S+55HqYtjxeIj1zPCP91q9L
2ENX11JtvZIOEb8f2X0i6ZlleYy+U4u9XSGBfQkiR0cTfveHP4NEIHOl8K1OBJe5
iA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:43 2026 by rpki-client