Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
File: tIPaBfgQj61WuWetrdJRxslpwlI.cer (raw, json)
Hash identifier: bvFJjuNCEF2EVEPxCcTt+9+lisTowGvWom5UXUwjv3M=
Subject key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:57:25 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.100.53.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30369 (0x76a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:57:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:32:2b:de:29:9c:b1:6c:32:13:c5:ec:09:
35:13:cc:2f:39:70:0c:88:47:3e:a1:d8:b4:03:73:
ad:51:75:45:a1:d6:ee:40:40:7a:6d:d5:23:85:dd:
23:77:22:93:42:e8:4e:62:31:1f:f3:6e:ff:23:f0:
fc:15:6c:98:9f:ac:0a:39:96:ea:cd:e2:49:35:73:
ae:78:42:5f:c6:97:58:47:cd:f1:43:79:75:81:a1:
e0:15:07:1c:a0:8b:48:f0:2c:0c:39:9b:c9:9c:71:
e8:42:e6:11:47:e9:eb:6b:28:23:5b:2b:67:37:73:
e1:5a:c5:f0:38:f7:d9:aa:83:be:26:97:29:1d:93:
50:50:4a:25:dc:87:af:2e:f2:88:5f:b5:25:75:50:
78:b2:cd:e6:42:1a:ba:0e:df:07:2f:2f:ed:65:e7:
24:29:ff:0d:52:34:a3:9a:8f:2a:9e:34:5f:9e:b3:
de:fe:cd:43:4e:53:9c:8d:89:b1:f0:b9:54:7c:f3:
8d:72:59:5c:25:fc:63:34:dd:46:97:65:6d:54:ce:
04:4b:3f:2c:2c:49:7a:e0:8d:29:7b:c8:e0:95:b4:
07:01:4b:50:5b:00:20:a4:da:b1:d1:4c:fe:72:2b:
da:c2:41:9b:f0:41:f8:d6:76:59:b8:28:0c:18:7d:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.100.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:46:d2:62:b0:93:10:56:e0:a2:cc:59:7f:48:81:e1:32:c3:
48:55:84:43:fb:ca:e8:6a:1f:4f:b3:1b:16:a1:c4:be:e8:55:
2b:7f:9b:46:47:d9:1f:e4:be:bd:20:ad:cd:20:3a:4c:6d:c2:
79:d9:76:ae:5c:48:ab:92:d1:40:a3:e2:ab:31:bc:84:3d:20:
c1:25:1b:fc:9a:49:08:5b:de:a5:91:d3:22:17:6c:1e:de:62:
31:18:12:8b:e9:d9:27:89:b2:18:89:49:d8:a2:7b:02:a9:7a:
c2:3b:5a:86:41:27:5b:aa:35:dd:62:2f:0e:30:c3:0e:b0:a9:
1b:8c:f4:98:d3:7a:3f:ca:cc:42:0c:69:29:1d:cf:6a:33:34:
69:28:bb:c0:8c:92:cb:e4:49:86:2e:c0:01:77:f0:f2:45:4f:
e9:1f:89:6d:d1:f3:44:45:23:c1:2c:f2:6a:ef:8a:5f:98:1c:
9f:20:d0:06:a6:51:ef:48:52:e1:47:60:0a:a5:b3:f4:73:c5:
36:6f:2d:0a:57:12:2f:48:4e:fc:22:77:c7:39:67:cb:c4:3c:
50:4f:07:b7:a6:66:a6:0b:14:8b:19:28:49:0e:9c:6a:54:67:
03:28:b4:67:97:c4:13:dc:5d:31:6b:53:52:58:d5:9a:7d:c5:
2d:e1:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:46 2026 by rpki-client