Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
File: s-lBocVdFIOrV5HZSYdQ492t7cw.cer (raw, json)
Hash identifier: DYkbA/6+4DDGdJ+Lay9Y3l9NbLbPJ14zVhOlKFVMoo0=
Subject key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76C6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:58:11 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30406 (0x76c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:58:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:24:e4:7e:16:b2:a7:e0:3f:09:45:cb:61:
c3:4d:33:54:0e:09:bb:47:02:4b:10:56:f1:c6:40:
5a:ab:a8:7d:9f:30:bb:4a:15:50:22:4a:01:53:20:
71:f3:5a:e3:46:04:af:ab:0c:c9:86:aa:89:16:1f:
a6:07:b5:a2:ff:5a:a3:95:2c:09:70:e5:51:2e:2d:
b5:2b:7d:09:5c:35:ad:15:c8:21:d9:81:14:36:83:
72:97:6e:45:1c:b0:0a:ae:1f:d9:99:fb:9a:d4:ea:
47:d3:81:06:ce:16:37:9a:df:7b:2d:d2:e5:e9:3f:
97:49:f5:47:32:72:8d:76:31:7c:a5:b1:10:08:d7:
ee:91:45:eb:de:e2:f5:98:48:ef:33:ea:ca:18:01:
0b:71:4e:d3:50:d4:e8:51:53:e8:c3:0d:6d:fe:b1:
26:3f:51:e6:f9:4d:50:3a:86:69:4e:7e:8c:10:2b:
b4:9e:f5:7b:6b:26:31:8c:cf:10:ee:29:64:c5:8f:
95:84:90:c7:3e:74:46:05:31:a6:f1:a2:48:14:37:
d5:39:b9:87:43:f0:f9:5c:cc:eb:93:38:22:9b:eb:
81:c7:a7:7c:f2:f9:01:32:02:bf:97:59:64:b2:8a:
2a:c6:e8:ca:5e:25:92:9a:02:2f:be:54:1b:74:fa:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.32.0/23
Signature Algorithm: sha256WithRSAEncryption
78:3b:f8:53:46:21:9b:8f:f5:ac:b4:e6:9a:83:5c:11:39:ad:
d2:d6:41:31:08:f5:f7:8e:59:10:33:1c:f3:cf:48:ef:a8:dc:
c7:9a:00:a4:ff:1d:8c:37:92:f9:76:45:71:3b:1c:c9:de:20:
b3:0a:56:6b:25:9f:4e:71:e5:46:90:3d:fc:b6:00:4a:7e:73:
cf:7f:cc:e4:39:ae:75:86:67:92:8a:43:88:e2:a3:af:c6:f6:
c0:14:08:af:72:c6:c8:ec:0c:32:8d:e6:af:40:a2:56:7d:7f:
e1:36:33:04:ce:d6:50:d1:b2:f0:b8:08:7f:b9:be:17:46:a0:
7f:33:43:24:a4:52:49:a7:41:26:ba:77:84:14:23:ce:cf:0d:
4e:ee:12:5e:13:3a:99:ed:3f:60:4a:8a:cd:93:c1:ff:d9:91:
60:55:41:10:3f:d2:52:38:db:2b:d8:c2:7f:4a:d1:39:76:70:
fd:93:0a:1b:b6:d1:8b:3d:be:c9:9f:b7:4f:95:c4:49:04:0c:
47:0e:ce:e8:7c:37:42:cb:57:fc:8e:79:18:16:81:cb:68:cf:
96:9c:b6:71:fe:0c:9a:1b:df:ec:0d:e1:86:c1:5f:bb:dd:35:
d2:ee:7c:d2:92:a3:4f:4d:3e:29:91:2a:52:6e:d3:f5:5c:70:
80:5b:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:14 2026 by rpki-client