Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
File: bz4CYgDVU58n4POqUNMgokUo1X0.cer (raw, json)
Hash identifier: 5VNFJ/aMvMXCEipAW63GpK1QCoVzA2BGbpNWhVmK/qY=
Subject key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 758F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:55 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.190.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30095 (0x758f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:55 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:71:36:04:05:f6:bf:92:83:f4:c5:8d:37:
fd:7d:06:2d:b7:c8:34:4b:8e:e2:7d:ac:4c:00:9c:
6c:74:f7:2b:57:27:f9:54:6a:c6:e6:ee:8c:91:fc:
c0:bd:c8:36:c0:3d:4a:b4:d1:1b:01:8a:2b:86:1a:
cd:86:bd:0e:6c:6e:46:8f:7c:f3:26:39:78:75:3e:
cc:17:6d:b4:7a:4a:8d:57:52:bb:21:ca:c5:5b:33:
78:f7:86:e8:fd:d3:14:83:2f:6a:be:24:a6:de:86:
a3:9d:27:bf:e0:d9:63:15:23:b3:3b:98:90:3b:94:
e0:ec:14:8d:45:b5:e9:94:cd:a9:8d:d6:68:74:d9:
ac:26:39:a3:54:0c:c2:c0:86:c1:49:69:65:c0:ec:
ea:02:3c:fb:09:b5:24:5f:74:f0:82:82:0a:b0:5e:
97:49:62:02:48:dc:a0:36:14:15:43:fd:8b:dc:5b:
0e:42:1e:e6:2c:6c:55:97:ad:d9:27:74:43:a4:3d:
0e:36:c4:72:05:37:29:e3:64:82:6a:b6:ba:d1:9f:
2e:52:c6:33:fc:50:a9:ea:c7:f8:ae:93:b1:fe:a9:
b4:77:9a:e6:48:14:a3:12:05:c3:d1:fc:ed:3b:6c:
b1:ec:36:e0:54:05:57:5a:fb:27:86:b8:67:00:dc:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.190.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:2c:c9:11:e2:72:f3:ce:92:b6:9e:4d:72:a3:f2:7e:90:b2:
e1:46:eb:bf:31:2f:a3:62:fb:86:1e:54:5b:f8:ab:80:79:8b:
f8:a4:76:5b:cb:3a:c8:f5:8e:b3:f9:fe:e8:26:ca:6d:36:9b:
7b:dd:5d:fe:0b:27:16:b3:8e:36:ff:c3:57:01:e9:8d:3f:e9:
a4:13:3b:55:b6:bb:f2:98:7d:f2:8d:75:4d:e9:95:97:56:65:
cd:5b:74:fd:96:d4:4a:fb:84:4e:12:23:f3:02:28:70:3f:4e:
11:a0:20:63:97:ab:2b:e9:11:5f:6a:54:3d:49:ce:dc:12:1a:
3a:1b:e1:43:62:a2:87:93:10:c4:0a:9d:5a:b1:6f:14:32:19:
a7:78:20:8a:56:0d:bf:4b:3d:ad:34:30:86:72:32:e0:3a:57:
ba:1b:55:f0:96:84:18:35:d7:2c:e5:55:5c:8b:5e:6b:12:c5:
26:0d:e6:d5:f1:a3:98:9a:84:53:25:5f:0f:c1:51:8a:0d:0e:
8b:25:cd:db:bc:d4:59:a1:3a:9d:af:bb:81:4b:41:5f:0b:8c:
e0:b0:3a:f7:80:eb:57:50:26:8e:b0:df:07:50:6c:8a:cc:37:
ec:c3:f0:21:a4:dc:59:69:1f:81:fe:9c:8d:f5:52:c7:30:1f:
90:55:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:03 2026 by rpki-client