Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
File: _MSmV91TDZU6LW8_FZMv_gHykdY.cer (raw, json)
Hash identifier: h2GYwX3W6FAFsTjIC9z74vXwOvSbpxvhdua/sGAre1Y=
Subject key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7585
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:44 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.192.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30085 (0x7585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ae:52:f6:36:ee:16:08:b6:a0:04:b2:a4:7a:
e0:e7:a0:0c:7c:9a:c7:06:a0:ab:5c:48:d9:1e:3b:
59:b8:7e:75:b0:85:f8:f0:38:31:5e:07:c9:ac:ac:
b7:4d:d3:c6:7f:de:40:bc:f7:1d:97:73:e7:e0:cd:
ac:45:de:17:89:90:28:f9:cb:2d:09:f8:23:2d:03:
ec:db:a7:aa:4d:e8:00:de:3e:71:6b:e0:04:0f:89:
51:b0:27:67:2d:2f:9b:a7:66:80:c6:1e:2f:f7:23:
7e:86:56:dc:42:8c:13:54:26:1a:ac:59:e8:68:6f:
fd:3d:2c:c2:00:a2:b1:15:c6:14:36:90:ae:da:84:
49:38:f7:77:c6:c5:be:7b:11:7f:80:3d:ad:d5:f7:
b1:2b:02:5b:96:6c:70:cc:84:3a:45:5e:87:d0:1c:
cf:05:24:0a:a1:f3:67:2f:13:4a:01:3c:0c:dd:eb:
3b:f9:3f:3a:82:63:3a:c7:56:a0:d3:5a:56:db:c9:
77:55:33:1c:b2:f2:c7:15:f3:19:78:9b:cf:d9:ba:
02:54:7f:31:96:7c:33:c9:dc:4d:fc:73:0b:2d:4e:
43:0f:fa:db:07:41:29:1f:f2:3e:bf:87:29:2a:78:
43:cf:16:f1:63:77:5c:76:80:03:8c:31:14:76:13:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.192.0/23
Signature Algorithm: sha256WithRSAEncryption
50:b6:62:7c:8f:95:ac:8e:4c:8a:87:b9:d0:60:3c:f9:10:a0:
81:88:c5:f3:b2:0b:2e:96:9a:97:6a:39:e9:cc:ae:27:01:48:
28:40:91:3a:da:d3:bb:d5:b0:27:36:68:e3:25:65:e6:f4:94:
70:af:f8:2c:e1:8e:5b:17:0a:cd:5b:4e:f7:20:b9:d5:1b:86:
b5:fa:48:73:e6:a5:b7:d2:09:79:23:2b:3a:2d:dd:23:54:09:
6e:ec:bf:d4:76:ca:91:87:4a:86:0d:54:cc:46:86:52:03:72:
78:b7:ae:e3:83:ce:47:a7:35:43:e5:2d:71:6b:7a:0c:98:6b:
f4:24:0d:8b:6c:7c:7b:da:62:c9:bc:d1:d1:1e:f5:30:76:70:
85:3a:1e:3d:79:96:ff:8f:a9:a1:94:8b:40:02:e5:c9:0c:4d:
1a:26:00:22:39:b0:f6:4c:c1:f8:70:77:41:60:e3:f9:eb:31:
f4:67:a0:f7:f9:70:cb:bb:46:57:c7:4b:59:6e:12:d8:8c:7a:
94:2c:07:7b:d9:88:45:26:99:be:98:83:e5:af:a2:67:d1:b9:
6e:22:c9:6b:b6:98:d8:48:37:a4:5f:7f:90:13:4a:c9:4b:06:
97:16:4b:b2:46:e2:f9:02:fc:fe:e5:fa:e5:7e:29:59:a2:86:
ea:b8:65:d4
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MTQ0WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2QkYyQjExMC8GA1UEBRMoRkNDNEE2NTdERDUzMEQ5NTNBMkQ2RjNG
MTU5MzJGRkUwMUYyOTFENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APeuUvY27hYItqAEsqR64OegDHyaxwagq1xI2R47Wbh+dbCF+PA4MV4Hyayst03T
xn/eQLz3HZdz5+DNrEXeF4mQKPnLLQn4Iy0D7Nunqk3oAN4+cWvgBA+JUbAnZy0v
m6dmgMYeL/cjfoZW3EKME1QmGqxZ6Ghv/T0swgCisRXGFDaQrtqESTj3d8bFvnsR
f4A9rdX3sSsCW5ZscMyEOkVeh9AczwUkCqHzZy8TSgE8DN3rO/k/OoJjOsdWoNNa
VtvJd1UzHLLyxxXzGXibz9m6AlR/MZZ8M8ncTfxzCy1OQw/62wdBKR/yPr+HKSp4
Q88W8WN3XHaAA4wxFHYT7GsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT8xKZX3VMN
lTotbz8Vky/+AfKR1jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJGMkIvNDU5RTY2NkVCNzhBMTFFRkI4NzQyNzZFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZCRjJCLzQ1OUU2NjZFQjc4QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFU
RFpVNkxXOF9GWk12X2dIeWtkWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaD6wDANBgkqhkiG9w0BAQsFAAOCAQEAULZifI+VrI5Mioe50GA8
+RCggYjF87ILLpaal2o56cyuJwFIKECROtrTu9WwJzZo4yVl5vSUcK/4LOGOWxcK
zVtO9yC51RuGtfpIc+alt9IJeSMrOi3dI1QJbuy/1HbKkYdKhg1UzEaGUgNyeLeu
44POR6c1Q+UtcWt6DJhr9CQNi2x8e9piybzR0R71MHZwhToePXmW/4+poZSLQALl
yQxNGiYAIjmw9kzB+HB3QWDj+esx9Geg9/lwy7tGV8dLWW4S2Ix6lCwHe9mIRSaZ
vpiD5a+iZ9G5biLJa7aY2Eg3pF9/kBNKyUsGlxZLskbi+QL8/uX65X4pWaKG6rhl
1A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:51 2026 by rpki-client