Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
File: ZajQiy7I9C1Duap6QjUXK7ftFmU.cer (raw, json)
Hash identifier: WqzqsPfBl0VpvyYJDJ9+y6hN3mMA2nEqftdzF3oTW1c=
Subject key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:53:32 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.50.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30168 (0x75d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:53:32 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:ba:95:9d:a9:af:36:c7:0b:c8:4e:32:11:
22:70:58:5a:f2:dc:0b:1f:8a:d6:88:74:2b:cd:3a:
6d:ed:74:a3:9b:1e:85:30:e0:91:66:4c:47:b0:a2:
e7:64:68:db:78:e6:40:e9:1b:be:1f:a7:ea:f7:42:
25:d6:c0:3d:57:c2:18:9b:99:b3:ef:c1:14:80:dd:
4c:eb:a3:ef:87:7d:0a:8f:1f:17:4b:7b:a4:41:fd:
fb:56:c1:b1:2f:3d:6c:28:1e:5b:72:35:e9:04:3c:
6c:b9:f9:ce:54:aa:d0:e4:ce:ef:bf:7a:30:19:5b:
a8:89:51:70:df:da:f8:49:43:b5:0c:48:ad:6b:08:
d1:fc:6d:db:fa:8d:2b:29:be:ee:d3:68:69:d7:ef:
8a:b2:a0:93:46:28:9e:f0:dd:8d:96:20:58:97:52:
c4:b2:41:26:a3:04:e1:99:84:83:ca:66:9b:23:a3:
20:71:e7:c5:74:22:f6:b4:92:ed:73:6b:74:03:e6:
b4:45:42:c6:e3:6a:c6:63:e4:70:0e:15:c6:50:04:
ae:a6:b1:aa:4f:1c:96:3b:54:4b:97:84:f1:ac:1f:
76:ea:8f:0e:f1:fc:3a:96:b1:1c:ce:ee:e1:3e:44:
24:1a:b4:83:13:48:a0:ff:c0:45:39:4f:3f:a0:9b:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.50.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:33:d4:8d:f0:14:df:dc:fa:6c:87:94:e9:07:0a:2e:20:a7:
14:ca:87:5e:62:ea:69:8b:1b:98:25:df:86:41:fa:58:e7:5c:
ff:b8:70:cd:3d:65:a8:95:02:46:51:27:be:0e:e5:8d:ee:43:
d1:0e:82:2e:0c:a0:fe:e8:67:1f:89:cb:a7:b0:31:5f:a2:88:
30:f3:97:75:db:08:f8:36:50:d2:d8:fc:e1:ea:0a:bf:65:56:
9c:e6:e6:8e:20:9b:0a:47:4a:ad:05:b7:83:2a:d7:a9:03:78:
91:a5:45:0b:32:3b:01:c3:af:19:12:7a:a3:ad:ee:da:13:ee:
62:36:d3:1c:57:6b:17:b2:34:5c:f3:9c:fd:bd:c7:a5:af:47:
bb:e4:05:d8:ac:a0:27:1c:f8:fd:1c:af:82:dd:3f:77:a9:9f:
9c:8c:99:fb:08:12:09:e6:f4:08:64:90:61:9b:a5:12:1e:0f:
5b:9b:d6:98:78:f3:73:e1:cc:f9:6e:79:5c:82:3a:ba:3a:e5:
06:d5:6c:35:16:f6:e3:e7:91:be:aa:14:e0:61:3a:05:5d:6f:
f6:94:bb:e5:fb:98:39:4a:2d:e2:2a:ce:79:04:d9:23:f0:29:
8d:b7:64:78:b6:cb:c4:c9:b9:1d:e9:0f:60:a3:fc:1f:d3:c8:
8e:ac:50:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:17 2026 by rpki-client