Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer (raw, json)
Hash identifier: RGpqE+WzW+fAEX1Ubb0OrCq2HsG2wVJVnZ/pCY3BvIo=
Subject key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7494
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:39:16 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.136.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29844 (0x7494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:39:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:81:69:cb:eb:19:aa:50:67:73:74:49:ca:
61:83:f3:86:9f:73:4d:cc:fd:94:ce:f3:0b:4e:93:
6e:b3:da:27:23:f6:fb:ac:b5:68:ef:67:f4:bf:c1:
f6:2e:52:d1:06:6c:91:26:3d:d0:7f:f7:df:06:29:
bb:8a:21:4c:f4:fe:98:f9:08:2c:fd:7a:25:0f:96:
e6:10:c1:b1:a5:5e:eb:6a:1e:b6:ee:9f:0c:1e:9c:
d9:c7:1a:1e:bd:c8:af:43:ad:f5:a0:e7:1c:95:59:
7d:61:90:cb:c2:a4:8c:a5:12:9a:4c:42:cf:4b:ce:
a7:32:07:b6:54:67:d7:6e:23:79:6c:90:26:ee:13:
09:94:3c:22:39:62:01:0a:12:ae:c4:ce:60:ce:b6:
2a:42:c8:ce:bf:5e:c4:f9:a9:89:91:73:e3:98:af:
e9:29:6c:79:8e:30:6b:cd:c0:76:48:de:07:99:e3:
2d:49:b8:88:f6:6b:c9:88:a4:9e:12:1a:50:44:27:
7e:2e:ec:a3:5f:72:78:e9:20:1e:05:e8:89:a9:2e:
25:ff:13:9c:d0:69:cf:56:dc:12:b2:69:43:66:cb:
d6:32:5c:58:4b:49:1c:8b:30:87:50:b6:4e:d5:58:
b2:e1:d9:e1:a2:34:bf:6c:a9:d5:67:d3:01:ed:b4:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.136.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:c6:0d:1b:e6:24:4b:47:49:2c:da:56:30:a5:50:4c:18:2a:
31:a8:e4:7b:7a:01:45:c9:64:7a:90:3b:30:26:7c:6e:5d:eb:
44:54:6f:18:b4:08:b7:77:79:47:b2:b5:0b:2e:51:e4:f0:82:
db:25:b6:e0:57:48:bc:16:0d:56:80:8f:80:af:2b:0e:3a:85:
19:cc:09:cf:ea:b7:ff:8c:39:e3:80:d5:29:48:04:25:db:03:
54:df:98:1e:ae:54:83:ed:36:cf:71:ea:89:d2:30:50:4e:54:
63:5b:25:f2:ac:11:d7:82:4f:f9:2c:f4:7d:8e:11:68:24:bd:
4e:c6:8f:54:9f:0a:41:99:fe:6e:0e:25:e0:44:31:ef:d1:c7:
df:0e:f7:cd:31:3c:03:9d:af:66:d7:73:80:86:73:36:8e:f0:
a0:f9:2f:29:48:7b:f4:0d:df:24:99:76:5c:ab:eb:66:d6:9b:
87:d1:de:10:f3:b3:60:ce:f8:54:7c:4a:e0:80:93:c5:e0:aa:
58:54:6e:44:67:46:b6:ce:bc:6a:65:5e:54:1d:02:59:19:d5:
8f:bc:3b:25:77:ea:f3:aa:35:72:b4:ba:89:47:d1:93:05:75:
cc:23:7f:f7:a2:eb:25:76:d9:f3:12:61:9d:87:12:57:fa:fb:
ae:78:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:12 2026 by rpki-client