Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer (raw, json)
Hash identifier: da0KRQOwcaFx7Pc2Mlhqw5nfqCMtkYqSjzV8kTxttFA=
Subject key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7554
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:42 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30036 (0x7554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:37:e6:ce:63:6b:e5:36:b4:d6:70:ba:07:
a2:6d:55:4c:c3:94:5c:aa:8d:cf:f0:89:f5:7a:31:
fb:a3:5c:8b:5a:06:68:ee:b9:54:bb:31:34:56:2c:
0b:28:85:b8:bb:5d:3e:fd:14:46:3d:8c:56:e8:bd:
19:13:28:17:3d:df:a0:e3:b6:53:30:34:99:29:2d:
2c:f4:75:b9:48:12:b5:18:04:c0:75:e9:ab:b5:1b:
9a:29:42:db:71:44:68:02:a5:2a:8e:2e:72:c8:ce:
03:a0:86:6a:54:56:16:f0:78:ce:2f:ff:8e:5f:95:
f4:01:99:df:2f:b9:3b:37:3e:81:d1:3b:c2:42:49:
99:d0:4b:10:1c:7c:e8:2f:5a:3a:ed:07:94:e1:0e:
16:10:5a:10:24:a6:9f:09:23:c6:ef:ec:d8:3b:97:
45:58:6c:2f:50:a5:bf:28:01:65:6a:09:cf:61:5f:
da:9a:d7:c0:5f:38:b5:23:bd:dd:8f:11:cd:b1:98:
0c:e9:02:ee:10:59:1e:5e:f6:49:bc:df:a1:67:d4:
d6:b9:28:65:27:29:52:87:d8:32:61:1f:ce:4b:79:
86:75:ab:e2:96:d7:ec:86:1b:4c:e8:22:10:8f:51:
40:b1:16:b1:d7:ef:50:ed:25:a0:79:dc:0c:6c:d3:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.218.0/23
Signature Algorithm: sha256WithRSAEncryption
30:4f:72:96:b4:6b:f7:60:67:e9:5f:74:f4:fd:54:43:83:20:
d6:77:d2:3d:e1:36:6e:52:af:a0:cc:9c:6d:bf:c9:5a:5f:73:
eb:b5:c6:88:af:2f:67:74:ed:ca:25:b2:dc:18:8f:93:19:af:
47:4b:1d:18:53:9f:5a:86:c4:3c:4f:68:38:1f:7b:8e:16:78:
be:e7:dc:0e:03:3e:41:c1:81:c4:bc:55:14:53:f1:be:04:25:
5a:21:1e:68:86:31:38:1d:55:b4:7a:a3:a7:a9:93:d5:24:3d:
9f:76:50:2a:aa:68:12:7f:05:6b:6f:fa:6a:66:ef:15:c5:34:
5a:0f:f8:c3:db:f5:d4:f5:aa:1d:8b:0a:75:ec:98:a8:69:e9:
29:f3:5b:17:65:78:70:53:ff:f2:bb:5f:90:89:4f:3f:32:b8:
5d:2c:52:38:3d:72:e7:1d:c6:50:4b:d8:41:29:21:c9:1f:45:
81:15:3e:24:f8:7e:63:3a:4c:5d:d9:cf:fc:d7:59:da:3b:84:
5d:8b:9b:78:d1:61:21:82:44:c2:b8:5c:67:f6:9b:31:31:87:
16:bb:10:7e:e0:0f:87:ed:8b:c5:c0:77:23:c5:62:d2:26:f5:
d9:03:30:cc:03:35:4a:10:02:d3:93:2d:21:4a:8d:de:30:85:
a3:5f:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:05 2026 by rpki-client