Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
File: dzzFL61HXymuNv14yBJ3Et_SFUI.cer (raw, json)
Hash identifier: bVneRtshzcFyJrM14lQvtig8gD1FWXJhSjCNRgyVnBs=
Subject key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 769F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:23 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 129.78.0.0/16
IP: 192.195.170.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30367 (0x769f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:23 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:21:bf:26:d0:61:cc:f2:5e:7a:ab:b4:b4:
81:e2:10:bd:4b:b8:3b:f3:cd:ea:9e:d6:89:de:f4:
9b:af:4c:7d:1f:e3:95:49:73:75:03:9e:83:c9:7c:
a1:aa:d0:e7:24:eb:a8:73:04:d6:e7:4e:ea:27:17:
5d:35:24:e1:5d:a9:f1:71:85:f9:cd:b4:a1:20:8e:
17:2a:d8:2b:59:7b:c1:bc:7b:49:b5:d1:f9:d3:8d:
c0:38:29:8a:c6:27:f0:69:6f:35:c8:58:11:63:f6:
3d:e2:26:10:ac:77:cc:b0:6f:6a:35:fd:cb:8c:09:
ac:19:47:2a:8c:dd:b2:a1:92:17:75:a6:39:a7:43:
20:e6:e8:35:2f:c2:5b:7f:c9:2e:51:70:21:03:81:
6e:51:32:89:bb:bc:b8:95:c7:63:ab:bb:a7:d2:96:
75:91:9c:d6:c4:93:9c:3b:8f:7b:dd:5c:e9:4f:dc:
fc:21:1c:30:6c:29:d7:66:da:f7:9f:4f:c6:c1:a7:
c2:00:18:d4:cc:57:01:9f:93:1b:16:67:19:1e:cb:
0e:7d:7e:3f:4e:0d:dd:65:0a:b9:05:0b:03:d7:86:
82:57:2f:07:0c:8e:de:d0:2d:28:83:48:9d:68:dd:
96:e0:c0:13:2c:5f:7f:63:f3:11:fb:7f:d6:70:2b:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.78.0.0/16
192.195.170.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b6:97:12:bc:d0:6b:4e:93:7b:e0:7f:ee:65:76:23:fd:27:
32:32:92:83:a1:c8:c1:a0:63:71:16:8a:e3:19:b8:8e:ad:05:
c2:08:d6:df:26:e6:db:e4:fd:be:8e:fd:78:99:53:46:5d:a9:
50:ab:4d:4b:64:68:3a:a1:3a:4f:f5:13:aa:eb:ee:61:1f:6b:
59:64:39:e0:70:8f:19:6f:7e:dc:90:a8:bb:d5:7a:27:00:f7:
e4:2f:17:49:63:63:f4:33:bf:c1:bb:79:63:0a:5e:e7:13:dd:
5f:3b:5d:14:29:3e:ea:38:d1:3a:71:41:fe:f6:f7:fe:19:f0:
0f:34:20:b4:86:28:4e:d3:4a:ac:a6:ec:69:9d:90:65:0a:71:
d6:2c:ed:6d:4e:45:c5:3c:0e:cd:8a:af:fd:6a:d6:f5:39:17:
e8:38:60:e6:aa:9f:07:d6:5b:e7:a9:83:69:1c:a5:7f:68:2b:
36:f5:3a:49:cd:ac:01:7c:e7:33:fa:fb:bc:31:6d:82:a3:c6:
d0:77:6a:7e:35:bd:75:8b:c6:59:00:33:6a:64:af:a6:35:72:
1b:8e:21:db:df:b7:69:f4:54:43:1b:9f:6f:65:4d:19:21:34:
aa:8f:bc:85:f7:28:ff:11:49:8a:a9:88:ec:fa:b7:bf:a3:2c:
73:ee:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:55 2026 by rpki-client