Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
File: aFVDc0Du-d9CM6owWYMBIXsKHFU.cer (raw, json)
Hash identifier: 3IrUVQAitGqQdYQkurrokrP/vubhSlXGhgEWZz53p70=
Subject key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 753F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:12 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.175.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30015 (0x753f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:99:c5:7d:73:89:f6:cb:3c:98:83:ec:e5:
e9:5c:79:0d:26:84:b8:c3:2e:f7:bf:bb:5d:89:79:
80:f8:e7:2c:de:b6:96:eb:6e:33:81:cc:2e:5b:ef:
0d:12:79:a3:c0:3b:cf:db:17:cd:a0:f4:15:63:46:
37:89:67:eb:79:74:a5:91:38:51:ce:77:b6:5e:65:
a6:86:48:e2:8e:10:ea:30:ed:7b:c3:7f:cb:b6:56:
05:96:9c:98:db:95:97:0e:70:7d:ed:33:16:6f:ca:
52:70:cb:02:9b:ef:31:aa:58:6c:ab:82:1c:de:0f:
8c:7c:92:e2:f1:70:79:1b:89:85:9d:01:44:08:14:
74:60:63:a0:cd:d3:52:c8:1c:40:17:c5:d0:3c:b2:
40:6d:33:65:36:aa:28:04:a2:6c:fc:f4:5e:8f:db:
93:c6:ee:45:72:f7:44:db:33:2b:20:04:ee:b8:76:
8f:82:89:f3:4e:fa:30:f0:2e:d9:19:48:14:22:6a:
6d:72:35:33:b8:02:d7:47:16:60:ae:5e:20:97:21:
b9:7c:d5:ea:a5:ad:20:ff:cc:42:45:4f:59:67:9c:
49:df:81:9b:cf:47:91:3e:d8:2d:3a:c1:b7:1a:bc:
5f:aa:51:f5:a9:2e:17:de:58:1c:76:d6:0f:ad:8d:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.175.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2e:0d:b8:2e:24:fa:8e:50:0e:1a:4a:3c:90:78:e0:e4:7e:
4f:c6:fd:e0:ae:89:de:b5:3c:15:54:30:cc:eb:f7:93:ad:59:
66:4c:68:4f:d1:59:be:f3:26:f3:b5:45:1e:fc:43:6e:4b:35:
77:8d:43:5c:73:f0:8e:70:0e:4f:9c:e8:dc:13:c4:53:e2:ce:
62:84:f4:55:77:3d:72:65:e1:37:9d:5d:b2:18:ac:40:1b:04:
72:63:92:2a:33:60:74:13:fb:7e:ef:22:81:45:ed:5d:95:36:
f6:a5:64:05:5b:e2:0a:7d:47:9c:92:42:f9:40:b1:1b:dd:97:
f0:2f:41:93:aa:a4:c8:fb:59:4b:d3:d2:b8:a2:e9:bc:97:2f:
c4:20:b4:39:27:5d:23:78:0a:7f:d8:82:a3:db:f4:02:af:5b:
01:0e:dd:9f:de:08:88:97:31:fa:fd:df:5e:f4:3d:29:59:84:
9e:e0:b7:c8:3d:2f:be:7b:ca:62:ba:08:2f:c0:56:5d:db:7a:
bc:05:f0:33:bc:66:c0:29:20:24:f2:32:c1:bc:0e:fc:42:19:
d1:ba:15:65:ea:4b:0e:67:64:1d:14:99:ec:fe:ee:9c:2f:6b:
9b:5a:8e:a1:b8:e5:2a:1e:5a:e1:a3:53:25:8e:90:e5:41:a9:
5b:c9:31:1d
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MDEyWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTExMEM4QjExMC8GA1UEBRMoNjg1NTQzNzM0MEVFRjlERjQyMzNBQTMw
NTk4MzAxMjE3QjBBMUM1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALKTmcV9c4n2yzyYg+zl6Vx5DSaEuMMu97+7XYl5gPjnLN62lutuM4HMLlvvDRJ5
o8A7z9sXzaD0FWNGN4ln63l0pZE4Uc53tl5lpoZI4o4Q6jDte8N/y7ZWBZacmNuV
lw5wfe0zFm/KUnDLApvvMapYbKuCHN4PjHyS4vFweRuJhZ0BRAgUdGBjoM3TUsgc
QBfF0DyyQG0zZTaqKASibPz0Xo/bk8buRXL3RNszKyAE7rh2j4KJ8076MPAu2RlI
FCJqbXI1M7gC10cWYK5eIJchuXzV6qWtIP/MQkVPWWecSd+Bm89HkT7YLTrBtxq8
X6pR9akuF95YHHbWD62NkDcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRoVUNzQO75
30IzqjBZgwEhewocVTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTBDOEIvOTQ2MDI3NEFGNjZBMTFGMEEzRkI5MDg4NkY2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTEwQzhCLzk0NjAyNzRBRjY2QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1
LWQ5Q002b3dXWU1CSVhzS0hGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJBPrzANBgkqhkiG9w0BAQsFAAOCAQEAMy4NuC4k+o5QDhpKPJB4
4OR+T8b94K6J3rU8FVQwzOv3k61ZZkxoT9FZvvMm87VFHvxDbks1d41DXHPwjnAO
T5zo3BPEU+LOYoT0VXc9cmXhN51dshisQBsEcmOSKjNgdBP7fu8igUXtXZU29qVk
BVviCn1HnJJC+UCxG92X8C9Bk6qkyPtZS9PSuKLpvJcvxCC0OSddI3gKf9iCo9v0
Aq9bAQ7dn94IiJcx+v3fXvQ9KVmEnuC3yD0vvnvKYroIL8BWXdt6vAXwM7xmwCkg
JPIywbwO/EIZ0boVZepLDmdkHRSZ7P7unC9rm1qOobjlKh5a4aNTJY6Q5UGpW8kx
HQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:15 2026 by rpki-client