Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer (raw, json)
Hash identifier: +MuQh++tJrTuGETABBXVSx7smpihUyHi63fjVSpnJ2g=
Subject key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 766A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:56:18 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.14.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30314 (0x766a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:56:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:b1:df:fa:e9:93:45:49:83:47:34:db:c5:
f4:a1:a0:db:61:cc:36:d4:00:68:0f:b7:d1:90:86:
52:6b:8a:f1:ef:3d:9d:c4:74:1f:35:d0:aa:d8:c3:
bc:52:6f:ef:48:ae:ac:44:84:58:cf:74:63:5d:7c:
0e:f6:bc:c7:9f:a1:3d:09:0d:af:b2:47:d2:4d:51:
9b:11:98:06:3c:da:e8:d8:2c:98:e7:07:b1:35:99:
ec:e9:55:d6:8a:7e:52:16:7c:0f:90:02:c1:50:89:
59:28:61:65:4e:16:29:e0:e2:16:3a:9a:26:0a:26:
25:d9:9b:cf:a0:60:7b:cb:cf:2d:fe:4f:83:05:00:
fa:41:d5:73:ba:f9:87:ea:84:b5:51:74:84:8f:4d:
c2:4d:35:68:dc:c5:73:dc:6e:dc:d5:ea:13:40:55:
ef:e1:28:86:cd:d6:e8:17:26:0f:df:dc:48:f1:3c:
48:49:b0:1c:69:f9:55:7d:90:a2:4e:41:d0:09:61:
e2:5f:2c:44:23:20:fc:b9:95:8b:26:76:3a:e6:39:
87:43:08:d1:e7:8f:64:9c:f2:44:d6:e1:b9:e6:f6:
f3:81:b2:bf:3c:0e:2b:fc:61:1c:6c:8f:17:03:ef:
50:bc:99:6f:57:eb:93:f6:e2:f2:63:6f:a0:14:ea:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.14.0/23
Signature Algorithm: sha256WithRSAEncryption
14:df:0c:19:d6:ef:98:a3:fb:5a:0f:09:46:95:60:19:ea:37:
09:a3:7a:4a:72:d7:57:59:7a:5e:53:3d:49:7b:31:53:b2:cb:
9d:49:95:59:d5:f3:4f:f8:b0:c1:c1:1f:01:58:fe:a7:2a:b9:
a0:bf:04:1e:39:6d:b6:cb:7a:62:2e:a9:68:05:af:87:a4:90:
33:5d:d3:20:9f:7e:60:ce:ca:94:31:ab:31:c4:a2:17:05:25:
98:ad:57:66:fb:8c:8f:eb:b9:cb:d1:a4:84:c7:0e:12:13:1c:
3b:4e:b3:57:c6:4f:e8:84:cf:f6:b6:e5:c2:c1:8e:5b:7a:2d:
af:04:67:da:e9:31:57:5a:06:71:26:35:2d:5a:52:2d:bc:fb:
c1:02:18:48:f2:25:27:fd:bb:56:0f:c5:0b:51:d2:33:b3:fc:
eb:46:05:47:dd:72:f1:ed:4f:ea:fa:dc:15:ee:25:53:28:c2:
25:29:7e:57:44:56:f7:7e:d4:28:34:6a:e7:75:58:1b:37:90:
00:2b:2e:32:6e:07:25:c4:2b:74:5f:b9:fe:fc:53:62:99:4a:
cc:0c:d6:19:b8:15:01:65:b0:b3:73:d7:5e:d5:4c:f1:e1:3e:
09:40:48:b1:4d:97:b7:bd:8e:66:55:11:c3:00:3f:48:76:55:
3b:f1:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:43 2026 by rpki-client