Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
File: hXUH8dizkVyVENUEcA7OiQsGaF8.cer (raw, json)
Hash identifier: sNLyY4N11328Dgo/v6I08DndPpk3bT/ChSSOF52kTsQ=
Subject key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 758B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:51 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.191.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30091 (0x758b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:51 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:67:0f:ce:13:88:16:62:f7:d8:ff:22:10:
05:da:f3:3a:c9:de:e4:47:e6:dd:3b:cc:ef:16:55:
d7:c5:53:23:43:26:f4:88:c9:83:81:38:64:aa:5d:
6f:5f:de:1b:09:cc:33:76:82:fb:b8:31:ab:5e:c4:
fd:04:6d:9d:53:29:89:cf:6e:e7:11:b0:63:e9:db:
bf:43:2f:dc:a6:f6:19:b2:d0:81:fa:2a:42:dc:59:
ba:5a:4e:c9:95:91:c6:4f:23:e9:0b:88:71:8c:b6:
dc:bd:45:3d:e8:14:b0:37:ac:06:5e:31:91:dc:34:
fe:45:ac:4c:23:68:3c:d2:6f:57:1a:ea:3c:76:c6:
32:f2:8f:7a:b7:52:b7:e7:55:dc:59:5c:6e:27:d3:
8e:a2:12:25:67:1f:37:4c:a2:de:01:9d:25:6f:e1:
8d:b3:88:be:c3:32:2a:76:82:d6:66:65:72:29:f9:
7a:70:14:90:b8:4d:9a:0b:b5:e8:16:ce:eb:c0:27:
ee:94:94:f6:0a:35:92:ee:12:37:a4:6f:b8:3d:51:
3b:12:95:0d:4b:fa:fb:6c:ed:a5:2c:e8:53:60:49:
32:f6:51:56:7f:32:40:61:f2:c7:64:5b:14:12:f0:
da:b9:8a:ea:3a:88:81:99:e8:fa:5b:17:ac:8b:9e:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.178.0/23
Signature Algorithm: sha256WithRSAEncryption
95:95:8d:6f:ef:14:c1:2f:e7:ec:8c:44:4c:38:50:98:a5:75:
f9:94:a8:09:e0:cc:15:13:92:38:0f:0d:9f:41:38:c1:54:8f:
33:77:f8:f9:a5:26:52:e7:b2:4a:95:d5:d9:6c:6e:3d:e5:e7:
c3:33:af:34:1f:dc:67:43:c1:9e:0b:14:ad:ef:d0:b4:f1:12:
75:61:ff:54:ae:c1:7a:20:29:b2:5a:ef:61:e6:54:3a:3b:f6:
7e:f3:9a:c6:5f:17:58:51:7a:34:6a:a2:ee:f4:78:8e:c5:52:
cf:e6:b9:bd:be:05:fd:89:3c:9f:26:ff:b0:3e:c0:91:a5:31:
f0:30:a4:92:11:4b:87:91:49:08:64:d5:ff:fe:e8:56:a4:b9:
66:18:32:a3:bf:1d:a1:42:8e:4d:b0:1d:c5:18:3d:fc:99:81:
f5:3a:be:af:95:bb:5d:f5:e7:0d:73:e4:a9:13:f9:c2:2a:6f:
c2:73:f5:d5:0d:3b:10:5c:f9:bc:4b:6d:08:d3:13:fe:a1:d3:
76:6c:58:eb:be:90:6d:ac:04:0d:c7:2f:b5:81:ee:70:80:04:
c4:e9:d3:9c:a8:3b:50:70:36:26:e5:bb:b6:5a:69:b1:46:d6:
f8:cf:bf:94:c1:2d:74:39:8c:c1:95:a1:9a:a0:79:f3:a7:0b:
77:69:a3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:23 2026 by rpki-client