Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
File: w5O8331Fpxlv881tMNYjDfT9xX0.cer (raw, json)
Hash identifier: ZD3X7aofILQWsgHe01eq54jWE+ywLOWEiCsWaAZ3zXw=
Subject key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 753C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:50:07 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30012 (0x753c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:50:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:45:af:d7:07:17:b9:8c:b1:23:3e:c8:c3:
47:36:b0:52:8d:08:1c:07:ed:cc:49:df:7c:bc:74:
bd:02:0f:64:56:9e:7b:58:b0:b2:eb:95:b6:b3:60:
8a:69:a2:d8:a9:51:89:0f:cc:ee:63:2e:b4:ea:88:
bd:da:00:32:56:07:9b:78:be:12:66:e4:7e:a3:99:
8b:e2:dd:db:f3:3f:13:97:fb:d5:b7:08:14:3e:40:
62:bc:87:07:83:4f:a0:f5:75:e5:e0:4c:1c:30:24:
6a:93:0d:e4:12:26:4a:e6:61:5b:51:2a:37:65:08:
1d:0f:96:25:c7:ec:fe:4d:bf:12:e9:f5:1a:a4:dc:
fd:ca:64:a3:df:ec:84:e4:bb:93:d1:9c:2f:68:ff:
a9:9b:df:e0:93:a5:04:8d:ad:e7:54:d2:03:c3:59:
03:84:e1:65:12:b8:17:38:bf:bf:57:84:51:8d:a5:
95:04:b2:9d:b9:cb:d5:82:92:6b:db:33:16:fd:07:
bc:70:96:c1:d6:f4:5f:87:85:0d:77:8b:90:f2:55:
ba:de:36:82:3e:7c:d2:84:aa:4b:46:8e:0b:33:cf:
ec:95:6f:28:ae:79:d4:2e:cc:a0:02:ad:e2:3a:63:
c0:1d:7d:97:a3:f1:1a:25:90:2d:34:6c:76:59:8b:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.122.0/23
Signature Algorithm: sha256WithRSAEncryption
90:11:4f:26:fc:c6:18:6d:52:e2:2c:98:2d:c9:81:09:41:78:
c6:6a:3f:e2:c4:bf:76:59:94:62:27:c6:f0:f9:9a:f6:92:99:
e1:e2:30:70:ca:ae:8e:9e:6f:73:39:f1:45:fd:f8:53:e8:6b:
2f:60:24:e4:17:1d:49:40:a1:a8:dc:59:97:cb:01:cc:a8:a9:
24:27:25:46:4f:68:5d:4c:4f:93:87:ec:72:b3:69:9a:65:09:
68:ec:36:57:b0:59:e9:c7:f7:2a:7e:5c:4a:be:50:9c:80:13:
81:d6:fa:a3:ce:f1:df:6f:1a:d1:58:bc:10:e2:a0:8a:77:bf:
e0:88:9f:ab:5f:a6:4c:71:0d:20:f4:27:05:1a:a3:a3:3e:f0:
22:7f:3c:4b:63:55:31:2b:0c:de:2d:41:af:4c:0a:ac:48:00:
4e:b3:b3:d5:64:f9:3b:d5:c8:16:8a:72:a0:12:66:4e:6f:15:
e7:ce:fc:01:c2:30:89:b5:78:29:fe:f2:1b:ac:00:a3:35:fa:
ef:76:33:e4:a9:c3:4b:64:97:c8:4e:c1:62:16:15:11:90:9c:
e7:ee:d4:49:f5:c6:e2:74:9e:70:29:73:34:d5:ad:c0:c7:5c:
fa:14:af:ba:8e:8a:8c:a9:f0:2d:14:d7:3a:39:80:78:16:a0:
c9:69:6a:84
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1MDA3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2RUQyQjExMC8GA1UEBRMoQzM5M0JDREY3RDQ1QTcxOTZGRjNDRDZE
MzBENjIzMERGNEZEQzU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMHURa/XBxe5jLEjPsjDRzawUo0IHAftzEnffLx0vQIPZFaee1iwsuuVtrNgimmi
2KlRiQ/M7mMutOqIvdoAMlYHm3i+EmbkfqOZi+Ld2/M/E5f71bcIFD5AYryHB4NP
oPV15eBMHDAkapMN5BImSuZhW1EqN2UIHQ+WJcfs/k2/Eun1GqTc/cpko9/shOS7
k9GcL2j/qZvf4JOlBI2t51TSA8NZA4ThZRK4Fzi/v1eEUY2llQSynbnL1YKSa9sz
Fv0HvHCWwdb0X4eFDXeLkPJVut42gj580oSqS0aOCzPP7JVvKK551C7MoAKt4jpj
wB19l6PxGiWQLTRsdlmLBakCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTDk7zffUWn
GW/zzW0w1iMN9P3FfTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkVEMkIvRkMxMUJGRDI0NUIwMTFFRkJENTk4Qjc3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZFRDJCL0ZDMTFCRkQyNDVCMDExRUZCRDU5OEI3N0M0RjlBRTAyL3c1TzgzMzFG
cHhsdjg4MXRNTllqRGZUOXhYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0KejANBgkqhkiG9w0BAQsFAAOCAQEAkBFPJvzGGG1S4iyYLcmB
CUF4xmo/4sS/dlmUYifG8Pma9pKZ4eIwcMqujp5vcznxRf34U+hrL2Ak5BcdSUCh
qNxZl8sBzKipJCclRk9oXUxPk4fscrNpmmUJaOw2V7BZ6cf3Kn5cSr5QnIATgdb6
o87x328a0Vi8EOKgine/4Iifq1+mTHENIPQnBRqjoz7wIn88S2NVMSsM3i1Br0wK
rEgATrOz1WT5O9XIFopyoBJmTm8V5878AcIwibV4Kf7yG6wAozX673Yz5KnDS2SX
yE7BYhYVEZCc5+7USfXG4nSecClzNNWtwMdc+hSvuo6KjKnwLRTXOjmAeBagyWlq
hA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:27 2026 by rpki-client