Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
File: oaoqLFbmSp2buqM3ttarNhctNo8.cer (raw, json)
Hash identifier: i4KrZpeppSEz30AZnBmbtvsBHsW6vxgmnA9tncOanUA=
Subject key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 754E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:35 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.188.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30030 (0x754e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:35 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:2f:6d:35:43:c3:06:43:61:76:57:8d:b6:
9c:f9:b6:0f:0d:79:b4:cf:48:f8:b2:6f:14:cc:cf:
37:ad:fd:d6:da:11:c9:51:2d:71:75:90:16:34:2b:
d7:f5:2e:39:86:ce:ee:cf:f7:d9:45:91:24:19:42:
0c:aa:0c:0a:d2:15:ed:ba:47:3e:7c:cc:bb:67:12:
14:29:5a:dc:ca:24:76:52:d8:76:82:6b:6a:93:31:
fd:7d:ed:a8:d6:c7:c0:8b:0a:7d:18:8c:68:25:f2:
da:2a:4e:5a:63:ca:94:bb:5b:b0:34:de:b0:7b:92:
79:3e:22:0f:06:88:db:c2:69:3a:75:2c:f2:3d:c4:
fc:6d:e6:6e:76:ed:ba:63:43:6a:1e:9f:df:cf:45:
a8:90:54:23:67:8b:26:97:fa:56:d3:11:55:59:c3:
ef:33:f7:70:67:4c:50:94:21:6c:5d:b0:10:da:42:
51:53:33:b9:70:fe:78:d1:6a:96:8c:c9:5e:89:94:
79:77:88:90:39:46:bd:c7:a3:81:d9:f2:6e:a1:f5:
35:69:0e:9b:09:39:51:f4:a9:38:b9:22:ca:eb:6b:
5a:3d:f3:b5:98:a9:4b:33:d2:a4:90:f7:0f:cd:1b:
d0:e8:4d:35:70:7a:4c:20:da:63:ff:05:99:ce:98:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.188.0/23
Signature Algorithm: sha256WithRSAEncryption
42:5f:6f:35:92:78:01:b7:e9:b1:80:71:3f:55:43:1c:9f:17:
c5:0f:0d:9e:59:0d:f3:67:34:a4:d7:c9:4d:12:86:1b:5a:97:
4b:c8:91:65:10:29:92:b6:56:8a:25:97:13:e4:5d:b3:27:83:
48:48:dd:00:04:11:72:79:1c:39:c3:ce:c8:cb:c5:38:98:b7:
5c:02:3d:63:0b:cf:c3:98:87:7f:9c:9d:31:2d:2c:d9:14:31:
3a:40:61:2d:bb:fd:78:45:19:42:90:79:dc:07:7d:fa:b3:67:
d4:c6:f9:77:e2:3f:15:40:22:77:11:b4:1a:8b:42:a6:c1:95:
8c:f7:23:ee:8e:75:80:e5:83:9c:61:1d:5c:fb:27:66:11:34:
88:5c:8d:b6:73:44:b6:c1:7e:2c:f0:be:70:49:91:ff:f4:1a:
56:ae:af:2a:a3:f5:0a:3e:1a:ad:c4:1a:da:e7:7b:d5:b2:23:
06:8c:cf:11:fe:c3:05:91:8e:45:b7:bd:03:c7:44:8a:c5:28:
35:57:49:24:63:28:c6:1a:da:d1:b2:a5:22:1c:78:ed:64:09:
d2:d6:e6:2a:5e:45:3c:56:2d:e7:33:65:92:15:94:c7:d8:57:
c7:c6:46:c4:e5:f9:81:24:fd:0f:a6:4f:36:37:c2:0a:b0:83:
97:3d:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:26 2026 by rpki-client