Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.cer (raw, json)
Hash identifier: WfeC6wqma45AsEjIS/15e6wRTHq730hutwd4tOagFqQ=
Subject key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75CE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:53:18 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.246.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30158 (0x75ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:53:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:61:9e:89:90:3a:bf:ab:d4:ad:7d:e1:56:
ea:41:52:0f:da:39:02:56:09:94:a5:3d:17:d3:b4:
a9:9f:4a:d2:5a:79:24:df:06:d6:05:c6:7e:17:1a:
09:c5:93:9a:89:e4:b4:78:b3:b9:d8:2a:b4:b8:6f:
6e:da:4a:a1:74:6d:59:d1:92:a7:bf:38:d4:05:7b:
04:19:3b:42:e1:79:7b:0a:9b:42:77:b9:4e:37:81:
a6:35:80:cb:b1:3d:06:77:0b:3a:d9:a6:0d:95:05:
3f:b0:f8:9b:fd:8b:56:e2:14:4f:11:d4:8a:ea:71:
b7:06:52:66:9b:28:5a:f5:61:55:06:66:03:81:97:
45:f8:39:0c:b2:57:ac:38:42:db:39:bb:88:9a:e6:
80:f6:7d:c0:59:fc:91:9f:20:f5:18:73:db:5c:01:
a8:5d:bb:5b:57:c1:60:a5:8e:f7:b8:15:13:55:7e:
32:86:e7:b7:e5:1d:20:92:0b:b9:cc:80:57:64:0f:
b9:2d:a6:53:cf:ba:d9:54:d9:ca:f8:bb:80:8f:59:
3c:f9:0b:b7:a6:0a:b6:74:3d:b7:04:f2:87:08:76:
aa:e2:e3:c3:c6:64:de:ed:f7:ba:fa:8e:55:6b:21:
d5:80:ee:20:d4:c4:7f:68:e7:30:b2:83:d0:37:77:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:00:8a:fc:1d:30:61:f0:b1:44:94:49:7f:39:5c:14:b7:6c:
8c:44:bf:75:df:61:49:ae:66:f9:1c:af:b6:02:29:74:42:de:
53:d7:04:aa:06:fd:fc:2a:d8:ea:3f:7d:cb:1a:47:c7:d0:7f:
c2:dc:14:c7:9c:8f:62:be:45:d9:1a:76:86:c4:4c:18:45:ca:
43:ae:6b:51:1e:fa:0a:9f:42:1f:f4:39:35:03:74:f1:91:d3:
b0:22:3e:36:24:b0:43:fa:25:ee:fd:49:36:27:c7:0a:c7:89:
b6:ab:cd:59:a0:92:5b:97:70:ae:a5:fc:33:10:fa:6d:5b:f7:
50:dd:b3:be:2d:69:bd:c2:f9:f2:be:5d:57:9f:f1:56:a7:03:
f1:a5:c3:66:7f:56:91:4a:00:0a:6a:09:d2:a8:f0:82:36:65:
99:10:34:7f:28:b0:4e:61:0a:6f:eb:3c:4b:9f:89:1f:02:6d:
ea:3a:3f:0c:e7:71:f1:67:02:3d:21:81:cf:f2:38:0e:2f:eb:
e2:b8:f1:3f:18:46:b0:51:d5:a7:7b:ee:ba:06:ef:8b:ef:fb:
4a:a4:f5:5b:0f:75:e9:19:12:b1:62:9f:63:cc:69:fa:ae:2b:
45:4e:63:03:e3:91:cb:87:08:66:9f:a0:b7:ae:09:a1:be:a1:
2a:2a:14:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:00 2026 by rpki-client