Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
File: piPcBe58I3DKREMQhN5RMh83pwQ.cer (raw, json)
Hash identifier: vWQw0DdJbljiBdsV6zUXmvVUzu3JTuD2YNv+4pof1Wg=
Subject key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75A6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:52:24 +0000
Certificate not after: Tue 02 Jun 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.40.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30118 (0x75a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:52:24 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:eb:58:e7:46:b9:07:d7:90:73:a1:c0:cf:
91:26:e4:3c:09:08:cd:24:a9:6f:e2:4b:ed:4f:38:
4c:69:0a:54:90:0b:2e:e8:c8:1b:2e:b1:d6:fb:65:
6b:82:a2:65:90:6a:61:c5:38:96:86:59:26:c6:7d:
7c:01:ac:98:a6:b1:e9:b9:10:13:7a:6a:77:1f:77:
15:65:52:54:0a:44:3c:90:16:7c:ec:b5:29:4b:52:
ad:da:5b:80:7a:25:c2:7f:73:d6:bc:d2:0d:e6:09:
52:88:f0:f6:1f:74:26:a1:72:39:fc:1d:90:20:e9:
67:57:61:2f:c2:77:63:28:e0:cc:12:36:49:b3:95:
9d:c7:cf:29:d1:2f:c4:81:35:30:55:5b:63:61:42:
06:6a:71:49:86:88:6c:b3:e8:bf:96:33:27:61:75:
2e:c8:a4:46:f2:ef:3a:a1:8c:44:e0:cf:6c:7a:d7:
fd:32:cb:a2:c8:4f:2d:92:6a:a4:de:fc:9b:ab:13:
82:1d:1f:30:78:b7:50:2c:b9:88:a8:b8:f4:38:22:
90:5f:e0:37:55:42:25:46:d1:b8:88:2a:93:c0:1c:
4b:6f:7d:d4:c0:4f:ae:f5:1c:e9:45:19:a7:84:ce:
da:1b:6d:2d:3f:b4:a7:6b:71:17:47:18:75:f2:9a:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.40.0/23
Signature Algorithm: sha256WithRSAEncryption
91:1b:76:9d:ef:67:90:c6:ad:4b:d3:bb:1a:0d:fe:f4:74:76:
0d:2d:4e:00:f0:b5:9e:e6:2a:47:1e:44:cf:07:16:d7:22:4e:
dd:f5:94:2a:fa:24:c6:e3:58:c9:38:47:bc:f3:cb:d4:16:a6:
bc:b9:7c:13:a2:ac:2d:9d:51:d6:00:94:e6:5a:43:5c:d4:19:
6f:87:f5:b7:e4:a2:b6:bd:84:e6:1c:55:1b:10:5e:a6:b1:4d:
42:93:89:98:26:bc:31:55:ad:8d:b4:59:a1:40:bb:d6:f6:9a:
9e:9a:be:fa:d3:aa:8f:8e:88:65:e4:23:61:ec:fd:50:18:d2:
c8:3e:bd:e9:fb:7c:31:0c:29:55:06:ec:3d:6b:56:09:f3:b1:
d9:64:68:03:16:d5:9e:4c:a3:9f:97:48:c7:b7:3d:ff:f2:3d:
62:be:59:30:9a:1c:08:94:77:e9:74:5e:a5:68:fa:97:5c:9c:
30:73:43:91:cf:c8:05:08:dd:50:77:3d:67:c0:c9:76:d6:3c:
6e:d3:65:8c:2c:d1:50:fb:a5:2b:a4:45:af:ff:69:c0:1d:b0:
ff:8e:cc:8d:ee:99:ab:b7:a3:49:5c:a8:76:91:9d:a8:33:3e:
1a:18:3e:ef:df:08:37:76:db:cc:07:05:d0:18:7d:38:ec:b9:
39:d1:e8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:26 2026 by rpki-client