Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer (raw, json)
Hash identifier: zNsE6G4BdG9AczYBYStGpG1WdiuMXXZdiS6jA74TxGc=
Subject key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7567
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:51:06 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30055 (0x7567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:51:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:52:87:37:e9:a5:4f:17:7e:d0:5c:a9:fb:
d9:68:f7:b3:84:f8:41:52:64:e9:01:61:71:81:29:
d0:d3:c5:df:65:8c:ea:5f:53:90:6e:54:c0:0f:fd:
0f:85:83:e8:37:1e:47:07:59:ef:e1:fa:ca:b6:ee:
fb:d1:c2:a5:a3:c8:d3:b6:54:65:ad:43:f7:25:14:
79:36:69:b4:95:0f:b8:47:da:7a:3e:f1:97:4f:5b:
94:a7:1b:12:df:cc:4b:5a:61:2f:96:cb:30:ef:4c:
a0:9b:3f:b9:9a:27:41:2b:e6:0b:9b:4f:2e:f8:84:
e9:31:d8:00:f5:96:a7:be:62:24:2c:fa:d2:cb:d3:
5b:a7:ab:10:51:4b:24:8a:14:51:1a:06:de:c8:0a:
2a:9e:b0:c7:ae:c1:d3:05:19:d0:a3:1c:e3:76:10:
84:27:d0:34:9c:d3:70:8b:59:34:76:7e:b3:78:a3:
69:26:26:5e:3d:87:c2:04:dc:98:33:00:10:6a:09:
f9:f6:0d:e1:22:e1:5c:84:9b:14:61:86:cd:6b:be:
84:8b:bc:de:2b:56:ca:9c:61:c2:2f:f7:af:c4:be:
7b:84:57:13:41:3a:21:56:72:de:d2:80:67:48:bf:
2c:9e:db:9b:b9:02:5f:1d:65:ed:98:36:2b:6c:98:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.226.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:20:34:f0:5e:00:83:50:91:b2:b5:e9:5f:d6:7e:7f:e1:4a:
94:ff:d1:39:82:8b:4b:18:82:1e:e7:ca:ee:f6:75:dd:a0:b6:
55:53:11:01:fb:a9:90:71:2b:18:bc:22:03:22:6c:8a:7a:a0:
c8:39:90:cf:0c:84:de:13:b7:14:6b:e3:f5:7e:7c:d3:57:20:
9c:58:64:68:d5:2a:53:8e:44:43:02:e3:9a:58:d0:d5:01:e4:
11:1d:54:b7:f8:82:af:c7:23:1d:f6:75:0f:7d:ae:67:99:0e:
6d:b6:c4:46:5d:c0:ca:4c:0d:95:d0:9e:5a:f8:da:50:63:3d:
70:50:f5:54:26:b9:47:b5:2d:36:df:60:34:f8:64:15:bc:77:
b2:62:a5:ac:51:ee:5e:92:b9:f4:1a:1f:3e:e9:6f:31:29:7c:
e5:77:b7:a5:26:80:e3:89:68:d6:f0:0c:8a:09:5d:1e:49:11:
c2:02:83:2c:82:cd:83:cf:c2:37:3e:2d:e3:c9:db:78:d5:25:
ac:c5:ac:1f:85:70:7a:2f:f1:5b:2b:96:14:71:ea:7f:50:56:
e6:a2:49:ec:72:fe:63:ee:f7:37:9d:bc:13:3e:5d:a2:4e:69:
f9:ca:2f:58:b3:40:ee:d8:dd:4e:34:16:1c:f3:19:cc:09:2b:
1c:43:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:25 2026 by rpki-client