Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.cer (raw, json)
Hash identifier: ZB7HT4jyQ1g6KcGA/G+/Ss2D6eCeCxXP1SpTbO1wwR8=
Subject key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 75D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:53:26 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.140.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30163 (0x75d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:53:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:c6:7b:02:0b:f0:f0:2f:c3:54:06:9d:aa:
79:1f:82:82:d2:31:ad:1a:c7:98:e2:2b:8d:92:14:
95:30:1a:30:d0:74:5c:ca:11:53:a7:08:c8:05:03:
c1:6e:48:58:54:9b:7f:89:9a:2e:ae:c9:61:99:c5:
6c:73:8b:10:cc:19:b2:18:e6:72:86:c4:75:32:e3:
56:6e:0d:53:88:79:7c:00:85:42:3d:44:76:08:e7:
6e:4c:d3:e5:d3:9a:18:1a:ec:50:a2:eb:36:0c:cf:
c1:bc:44:7e:5e:23:f7:78:56:8f:8a:9b:86:44:13:
3b:ac:fc:b1:3d:07:4d:99:67:21:61:33:7c:f0:3e:
84:a5:0d:16:95:09:1a:2d:bb:bf:53:ba:5a:a2:6a:
97:d8:10:e4:7f:16:bb:02:f8:97:f8:8e:50:48:36:
61:f9:e9:11:07:2c:a7:e7:97:7d:7d:26:fd:81:7f:
01:f2:e8:e9:26:39:4a:d5:61:64:12:74:f9:f1:7f:
97:4e:9e:5e:17:19:70:01:22:79:04:f4:f1:41:16:
d7:a8:07:1d:94:34:3e:c6:5b:74:37:a0:4b:a7:e2:
ab:5c:ba:41:9d:5d:4e:da:20:f7:13:65:1a:ba:39:
07:db:f4:ed:7f:4e:2a:9a:40:00:35:c9:42:f6:a5:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.140.0/23
Signature Algorithm: sha256WithRSAEncryption
66:c9:8e:38:ce:7e:11:7d:68:68:fa:11:a8:21:c8:e2:2e:3e:
f0:8e:5e:7e:b8:97:30:a0:16:98:70:41:f3:f9:d7:a4:78:d9:
2d:e3:42:7a:df:f0:3b:31:6f:d1:f9:d8:93:9e:69:fc:d4:50:
63:8f:85:e1:1e:52:60:75:4d:a5:7b:e5:69:05:cc:a0:9d:f5:
71:46:d1:55:c6:92:0c:88:92:0e:91:b8:6b:21:c3:49:7f:03:
bf:bd:2a:34:ac:19:1b:8e:12:53:a3:9e:ef:9f:46:6a:19:c7:
3d:83:14:b3:3b:2c:a3:7f:77:ed:b7:c7:f0:76:33:c0:b6:09:
cf:d7:52:24:c2:27:c0:62:b1:1f:41:16:91:ea:82:d1:6b:b2:
64:f5:5d:f8:41:66:34:13:e5:15:74:11:84:e8:5c:db:22:d8:
b5:a9:d5:0a:9e:a2:82:4d:11:3d:01:2e:0e:61:dc:40:9b:93:
e6:1a:d6:f6:d7:ca:43:c1:2b:03:6f:61:86:e6:06:39:56:79:
6a:56:0d:6f:b5:b7:b9:7b:f3:90:de:93:07:a7:df:34:1b:4f:
29:cd:d1:e6:67:7c:e1:78:a4:92:c4:e1:d7:d9:5b:ce:8f:1b:
b7:89:cb:8f:18:4c:6b:9a:11:50:7f:ec:07:7a:6c:d9:b5:82:
30:b9:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:19 2026 by rpki-client