Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
File: sRoiVto9XbOPPn6bWct0YsnnsqY.cer (raw, json)
Hash identifier: pOwhC3IKulEUU9lbOvbmkYDawzrb+bE5zivVwcbnsgQ=
Subject key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:53:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 146.171.0.0/16
IP: 192.161.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30161 (0x75d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:53:23 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:d2:61:35:44:f7:88:91:4e:07:79:c7:91:
e8:f5:08:71:d8:12:ab:22:db:22:f1:00:f2:b3:d7:
52:69:18:7f:f2:6f:c7:54:05:00:d8:c3:f5:16:7e:
d0:e8:34:1e:d7:b7:d8:67:50:34:09:85:e6:f5:75:
9e:53:fe:44:55:92:1f:86:46:c0:69:ec:ba:d3:79:
bb:c1:8a:de:71:c5:12:ff:18:5e:c6:b1:8c:31:43:
b7:ed:38:2d:3a:47:9e:af:cc:2f:80:ef:06:b1:75:
ab:d1:05:2a:bc:37:7b:91:76:58:fc:59:a9:f1:cf:
ef:82:1a:07:91:93:f7:58:58:58:8b:ed:90:42:58:
32:53:4d:0b:2f:2e:c3:68:8a:84:da:b9:dd:d2:0e:
b2:67:35:b8:7f:29:74:c0:05:5f:66:ba:d2:b6:3c:
2e:f2:9a:8a:d5:3e:1a:34:ed:d4:b9:53:5c:9a:36:
c3:2d:fa:28:32:92:28:f6:d9:6d:33:ce:3f:72:fd:
de:0c:54:34:01:1b:a1:a4:58:cd:83:27:65:c0:cf:
d7:27:62:8b:b3:0d:19:39:bf:06:62:f6:4f:db:82:
d1:96:0e:ea:8a:83:4e:a8:df:4a:63:3e:a4:80:c3:
3f:d4:eb:6f:17:64:10:a3:c0:2c:39:5b:9a:d0:d3:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.171.0.0/16
192.161.128.0/23
Signature Algorithm: sha256WithRSAEncryption
98:66:30:ae:35:44:9b:de:b9:84:81:58:14:13:9d:d4:37:5a:
2f:d7:69:7c:73:26:ea:db:dd:14:8e:02:46:a2:f8:fc:bf:ce:
fb:3c:88:b4:a7:9b:df:4c:f5:d3:6c:45:2c:7e:9a:f2:c1:5f:
2a:12:97:ec:b5:99:e1:b9:fe:65:40:5b:87:4b:a3:49:31:b5:
53:37:5e:3c:54:8a:e5:a0:60:42:3f:f5:44:9d:d3:71:01:9c:
9e:da:43:21:ff:ba:1b:b6:e3:6e:ce:ef:16:9a:83:b1:67:70:
a5:ee:bc:97:31:87:58:41:05:96:c7:81:82:95:96:d4:31:e7:
58:87:2a:99:a7:32:5e:72:b0:c3:bd:b9:2b:68:c4:45:79:5c:
1d:a5:2a:65:4e:8c:4f:0e:11:f0:b2:24:fa:c1:1d:13:f2:bf:
54:66:b3:52:e7:5a:2e:ed:b6:cd:f4:bc:2e:cf:80:dc:16:aa:
d0:23:0f:a6:f8:34:a0:af:ed:21:0f:4e:94:98:83:26:b6:9b:
92:28:63:8c:9c:05:1f:57:b9:51:1c:7b:63:86:64:0b:10:b4:
52:28:6d:0e:28:b0:8f:74:9f:29:3c:b2:c1:8f:61:86:6c:d4:
9e:5d:39:65:df:2b:e5:5d:f9:b8:3c:cf:5e:c8:2c:e6:e0:f7:
18:c2:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:13 2026 by rpki-client