Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
File: kw3fQQEGkDvrmRnJm94BY4cGVa4.cer (raw, json)
Hash identifier: xr2xWGkaOjlPUcJSxgwRczCInDBkMRde3+wo/HGL+SU=
Subject key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7589
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:48 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.186.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30089 (0x7589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:ba:05:f9:d8:f0:67:3b:db:ef:b2:30:42:
6b:51:ac:ec:79:e5:41:49:6b:bc:8c:77:1b:f6:77:
f5:73:72:94:1b:4a:15:57:92:2a:5c:bf:32:19:80:
9a:5c:77:57:59:e0:1c:b8:57:77:b6:ef:35:5a:5b:
96:3e:98:9e:4e:6e:12:ca:6a:ee:72:ce:98:3d:1b:
f6:79:a5:36:e3:9e:a6:76:10:c2:f9:44:e1:fc:f0:
72:89:2e:18:c3:d6:1c:0a:20:6e:cb:1d:05:d8:ca:
ee:ca:ff:1b:fd:f7:fe:57:83:ee:41:35:cd:05:33:
92:00:97:14:5a:e7:2e:da:a5:ca:e9:83:a3:ab:1c:
46:10:c2:74:50:6f:11:82:31:e8:64:2a:a2:cb:11:
42:30:52:21:39:fc:01:e2:42:2e:ea:7d:d3:e4:f0:
0b:0b:04:fe:d9:d3:62:02:8b:53:05:24:f1:7c:63:
e3:47:78:9f:ba:50:85:e0:b5:a1:cc:80:42:2d:04:
0e:5e:e3:41:29:f5:6f:47:49:cf:7d:05:da:c3:3a:
7c:c7:40:7e:9f:18:8b:01:14:d1:73:c2:fb:81:8f:
29:7b:25:15:e4:c6:8d:d3:5b:89:ff:d8:51:ab:ae:
d5:b5:f6:ef:46:ac:ad:47:7d:6e:64:03:d5:ce:68:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.186.0/23
Signature Algorithm: sha256WithRSAEncryption
74:26:d3:a7:94:f4:85:8e:0a:bc:f8:55:4f:9e:7c:8b:3f:4e:
1c:0e:80:f3:d6:08:f4:5a:d6:be:91:0a:2e:30:d3:8d:0a:67:
cb:16:ba:ee:69:79:68:66:94:b1:20:1e:8a:1f:9a:c5:ec:00:
94:e8:5c:56:df:71:bd:39:9c:e3:9a:da:8e:d3:11:62:84:54:
ae:f4:55:1f:f3:94:d2:c1:e3:ca:49:6b:ef:d0:52:e6:e3:d0:
0e:9d:2c:20:8d:6d:7d:f4:d4:9c:20:3c:3a:e5:4b:62:5a:53:
6d:7f:de:72:8f:a0:f9:82:36:25:96:25:d2:1f:eb:64:de:1e:
9f:d9:d6:28:0a:a8:69:d6:cd:bd:4b:e7:bb:7e:ea:57:72:13:
93:e8:02:96:3f:1a:06:e0:8d:6c:93:06:3f:cf:f2:f0:c7:4e:
35:a5:00:87:88:2f:79:ff:d9:f5:99:88:62:85:11:03:5a:27:
8c:8f:4c:06:d4:aa:9d:13:53:ee:34:96:1f:49:ee:5d:2c:eb:
e6:bd:31:bb:43:93:19:d1:f9:72:a6:9c:1d:e2:2f:ae:a9:41:
39:6a:d4:29:0b:f0:b0:2b:0d:05:62:a0:f6:db:68:9f:2d:31:
8d:09:1a:5b:b8:6c:30:a6:e0:5f:a2:97:63:4e:dc:df:af:d9:
62:44:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:04 2026 by rpki-client