Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
File: ctH2ecltIFwtRxyUqA3vYNkRJhw.cer (raw, json)
Hash identifier: 3ujuApD7oGDmyuXBJQcBKmBGIX5pwALhoINtsoLz8NI=
Subject key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7914
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Mar 2026 13:56:49 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.20.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30996 (0x7914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 30 13:56:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:fb:66:da:9f:5c:11:96:4b:23:5c:30:8d:
9f:69:5b:47:98:2b:4a:f7:e3:a9:b5:96:ef:73:68:
48:15:3a:ae:ea:ee:61:58:3a:b8:98:04:01:ed:51:
f2:1f:42:93:28:2b:9a:d9:71:3d:1c:21:bc:36:95:
e9:45:51:81:ac:be:6c:0c:e0:10:5b:ba:66:c7:9d:
c0:a3:26:3f:d7:56:0d:16:62:58:1d:72:0a:f0:1c:
69:da:5a:68:23:b6:11:96:70:f5:a3:b2:83:67:78:
26:4c:e3:c4:bd:a9:1a:c0:49:91:9f:e6:96:09:60:
ae:72:5f:6a:7d:5a:15:70:44:63:89:de:31:ff:0d:
18:9e:80:86:3f:7d:66:a2:c4:03:77:33:b0:d6:98:
28:63:0e:74:d4:ca:61:c2:a5:61:92:dd:b7:3a:57:
38:63:e8:8e:21:04:38:3e:44:a7:d7:ae:ac:aa:e3:
5c:e8:26:ea:e9:76:06:66:57:c2:62:58:54:71:43:
a5:56:f0:75:31:90:62:2a:52:cb:e3:38:be:2b:15:
cd:c8:a0:3a:2e:18:ab:17:3c:f5:32:3c:fb:7f:69:
40:43:37:42:8f:53:f8:24:a9:ec:01:fa:e0:22:4e:
2c:0a:10:8a:96:37:68:68:9e:0a:bb:6c:89:c7:f8:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.148.0/23
Signature Algorithm: sha256WithRSAEncryption
77:cc:eb:ef:0f:de:b2:24:af:4e:3d:e6:23:9f:7e:ac:00:f4:
23:37:3b:4f:04:b8:d3:bc:fc:b3:6d:97:9e:9c:d8:6b:db:41:
b0:2a:39:1b:9b:ef:d1:4c:dd:eb:48:b3:83:d0:ca:c3:d9:38:
63:67:a2:75:b3:da:03:73:7f:82:5b:d4:3d:1b:46:c6:ee:e2:
bd:7a:ab:7e:a9:ef:f4:bd:fc:67:50:9e:98:06:fe:07:3a:84:
ed:91:7d:8a:12:d5:6f:ce:d9:e7:8e:c3:77:33:74:9e:93:44:
ba:69:92:32:f1:65:3d:34:b3:71:f6:e2:cd:ab:db:33:ec:5e:
c5:f7:06:77:49:1a:65:10:e8:d7:74:29:da:54:65:9c:b3:55:
7b:63:b7:72:01:d3:d5:73:3a:af:14:80:89:04:e6:8b:5d:08:
8a:f0:57:c5:0b:7a:51:57:be:cd:22:8d:50:03:a6:72:42:d3:
d2:a4:cd:3e:0b:47:7c:d4:4f:df:c6:83:25:db:54:5a:67:d2:
18:29:ee:8e:8c:ec:ce:f6:42:81:81:d7:70:a7:b7:3d:bd:d5:
05:a5:fa:8c:ab:d8:07:fb:c8:44:62:cb:fd:fe:b7:f7:f6:0b:
00:ab:7e:2a:2d:78:4c:06:f4:eb:4b:cb:4a:79:78:6c:d3:e2:
05:72:c0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:53 2026 by rpki-client