Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
File: s47RYTLcuXiWdncaiwnkUJue1Pk.cer (raw, json)
Hash identifier: sZWOz2QQzL5VrQKDIrBvIMP2PMHd3zvksVcSzg2I6Ws=
Subject key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7491
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:33:25 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 137.172.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29841 (0x7491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:33:25 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:5d:2c:ae:be:5a:49:c5:3a:a3:13:0c:36:
92:69:17:d0:bc:0f:e5:59:4d:46:cf:1a:02:82:f7:
ca:41:2f:0f:cd:31:99:86:e7:b7:9d:63:50:d8:29:
ea:c3:97:ef:af:62:c8:07:b1:e0:ed:bb:72:11:a3:
56:8f:17:da:89:74:95:91:d5:2e:30:17:22:d6:30:
65:ad:88:45:d0:7b:18:ea:5f:57:db:23:fb:2e:e6:
2d:7e:d7:ec:9f:26:ad:df:dc:c0:88:84:61:39:32:
6c:07:a7:b8:0b:7a:e5:a4:55:95:d3:24:f6:7e:1c:
5b:bc:97:24:82:9d:0d:65:f4:86:56:8a:60:72:6e:
1c:31:e0:9b:a6:1e:32:1e:39:d3:3a:6c:03:29:fc:
45:31:66:21:60:e6:b3:fd:a2:4a:e3:ad:23:00:1b:
76:a5:67:c8:36:4b:12:5a:db:a3:26:df:09:98:ac:
4b:81:56:71:e2:ff:da:41:59:ef:be:65:90:90:77:
b1:d4:f8:e2:68:c9:99:61:52:e5:44:93:9f:0b:ff:
75:ac:09:c5:8c:91:36:2b:06:06:21:e2:23:80:83:
25:cc:61:c2:87:18:3e:99:1f:94:84:45:24:76:66:
99:f0:6f:df:38:12:a9:53:73:54:69:03:e8:4b:26:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:b7:0e:cc:58:32:d4:3b:19:e2:48:b1:b8:80:8e:81:cf:f0:
c3:4b:7d:30:38:f2:7f:19:5b:a0:8b:26:85:8d:60:e2:e9:95:
e1:41:35:ac:4c:58:41:02:58:f5:a1:fc:7f:16:3d:43:84:04:
1f:2d:da:e6:ad:80:29:4d:60:87:0a:49:28:af:8d:24:e7:d5:
0d:d4:23:fe:4a:cd:e2:22:0c:89:0a:7a:f0:9b:12:65:21:64:
6f:0b:14:0c:25:8e:45:a8:c5:cc:46:c4:f2:d0:8b:79:c2:ba:
55:ce:47:6b:2f:f1:cb:09:09:89:36:48:03:32:aa:2c:b6:c5:
5c:4c:ad:ee:6c:ea:46:f4:66:17:67:e8:4f:09:6f:2f:e5:b2:
e6:21:f6:ec:4b:09:ac:b1:85:ba:dd:03:9f:fa:9c:99:93:41:
a1:f9:0b:12:db:e5:08:a8:7f:d0:4a:14:95:6f:e7:24:da:5e:
3a:a2:e2:fa:ba:29:cf:0b:4c:1e:be:ed:57:9a:1a:2d:14:4f:
94:66:95:9d:17:8f:cd:61:5b:38:73:01:1c:bb:05:10:9d:e2:
17:11:a6:f3:6f:e6:61:db:5c:43:e9:8b:76:97:a4:e3:a4:c8:
16:6b:41:b2:65:0d:70:e0:45:48:2a:a0:12:ab:0b:5e:94:3c:
11:29:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:01 2026 by rpki-client