Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
File: lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer (raw, json)
Hash identifier: AmxpfwaKAdebu6CFxwcbuBQVxFc/eb6iSK2vEOtVqv4=
Subject key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:58:30 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 165.99.181.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30422 (0x76d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:58:30 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:ac:12:18:dc:a9:a9:c0:6e:0d:bd:75:56:
97:0e:19:fd:f1:73:bd:10:56:ce:db:b5:27:2e:0c:
84:9c:e5:f0:4a:f8:c6:94:d8:fd:85:fc:67:8d:27:
75:9f:2a:93:ca:96:bf:fc:3a:dd:84:e0:b2:ab:40:
1c:0b:9c:8c:6e:65:b8:dd:1d:1f:47:be:c5:df:b7:
c7:69:b6:b8:82:25:77:67:e0:61:e5:66:cf:23:01:
d3:3b:c4:d6:f4:ec:6e:cc:a6:d2:e6:ff:dd:56:9d:
a7:33:75:47:5d:9b:0b:b4:fb:73:bc:3c:b8:7b:9c:
a0:aa:a9:75:6d:08:84:5f:3e:b6:7b:63:8e:e1:6f:
06:97:74:6c:2c:2a:1e:17:30:b8:20:30:f2:17:1c:
c7:af:a4:4c:7b:f7:d1:49:7b:51:47:e4:b8:29:39:
b3:14:28:09:85:09:6f:c2:ed:ac:4b:40:b5:be:37:
67:02:57:dc:08:e2:a1:11:f3:b9:5d:c9:82:61:49:
d5:8e:f2:be:88:88:98:89:9d:d1:1f:2f:eb:2b:e9:
43:a8:a1:2a:c8:08:04:cf:d0:98:8f:a4:71:08:19:
3e:c8:28:5b:a8:b1:3c:f7:ef:03:28:32:b9:c8:dd:
f2:ae:b0:66:d6:39:18:80:6d:01:ed:5a:d6:91:71:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:67:38:a5:36:58:d7:cf:21:68:18:a7:e6:a6:d3:3b:7b:15:
bc:c3:af:cf:1a:f5:a2:e3:5e:22:2b:ad:29:23:86:15:5f:90:
30:68:10:90:cd:50:f1:dc:aa:6c:10:2d:db:21:b3:d8:b1:30:
b2:8e:50:4b:c6:36:3f:5a:53:dc:94:1a:d4:58:81:49:8d:25:
ee:74:5e:92:5c:b9:85:8f:c5:1f:b6:eb:92:89:4e:76:ba:c6:
72:50:44:4d:e7:77:10:7c:e9:7f:b1:e5:f3:a0:da:a6:66:82:
ec:7b:bc:71:ba:df:96:09:a8:00:de:85:86:f4:ec:1b:62:37:
28:99:c1:b5:ea:84:a8:92:ef:83:8b:03:7a:8c:4a:31:ee:90:
08:90:4a:a4:96:51:0a:2e:ee:ff:45:b5:a4:2a:1c:99:0f:31:
1d:bf:e6:eb:7e:b0:92:2e:14:18:a1:ea:b8:9f:6a:49:5f:a3:
04:9a:d7:cf:31:ec:1f:0e:7d:ee:fa:60:92:d8:31:2a:5a:e3:
11:f1:d0:6d:c2:66:23:bc:6f:09:e3:48:97:d4:bb:1f:74:1f:
a7:23:09:12:2c:85:11:fa:a1:f3:21:9d:ce:68:77:c5:90:1d:
9b:94:88:05:55:8c:cd:f2:71:8a:2d:53:cb:21:d8:6f:b9:65:
8e:e9:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:42 2026 by rpki-client