Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
File: xzON8bdowFB0za7Q_bGkwUrfuLU.cer (raw, json)
Hash identifier: ZMtc13/CjzNXSq7XFf8fyy0lVL6L6ENLnHw5p8V2tDA=
Subject key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7532
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:49:56 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.134.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30002 (0x7532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:49:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:70:05:f9:f3:7f:7e:b1:e6:01:24:f5:ad:6d:
74:a1:c0:10:99:22:e3:80:5d:d0:33:24:22:f2:60:
80:e3:fb:73:78:24:c0:18:5d:6f:87:49:c5:99:da:
33:2e:bd:e8:57:34:b6:9a:37:6b:30:2e:1e:99:5f:
c7:98:61:49:a4:c9:32:2b:81:22:58:3c:72:1b:b5:
da:69:f9:76:35:41:44:49:2f:36:05:d6:ea:24:47:
39:5b:3b:79:54:1e:2f:32:a5:9a:47:d7:cf:7a:56:
2d:19:5f:05:b0:e6:20:ba:5f:60:41:9d:26:f3:85:
5b:5b:ea:cc:3c:ff:36:4d:37:4e:c7:bf:0b:64:b6:
50:41:18:c5:4e:23:8a:9d:1e:c9:eb:1a:d4:94:f8:
4a:46:d2:80:92:db:76:96:52:6d:14:cc:19:1d:d0:
4b:58:bc:5f:2c:a3:fd:7c:a0:b7:4f:c7:08:0c:f2:
bb:5d:75:cc:02:3f:3e:1d:1a:e6:a8:82:ee:15:3e:
44:29:c4:ab:c6:10:d5:c8:4c:06:09:40:8d:62:20:
26:ba:5a:37:2b:b9:fc:5f:45:54:03:aa:be:cd:a5:
b2:ad:aa:a9:fe:0b:92:ae:aa:43:a9:e0:78:ee:da:
a4:39:2c:0d:61:74:3d:14:12:e5:28:d9:6a:78:e4:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.134.0/23
Signature Algorithm: sha256WithRSAEncryption
02:4d:34:ee:24:f7:a4:15:43:77:e1:f0:a4:a0:ea:9d:8f:a6:
f6:51:ed:96:5d:44:88:ba:98:f1:97:78:79:76:24:f2:95:5a:
59:fd:eb:46:bd:61:09:8b:f8:f6:fb:b4:cc:4f:10:0b:71:cb:
51:b5:ff:e5:77:e7:4d:24:0f:d6:32:91:98:06:9a:c1:6c:84:
9c:65:a6:fa:d7:cb:88:5c:7e:78:23:cc:eb:17:f3:09:71:0c:
47:8a:db:54:1d:c1:21:07:19:7e:72:40:c0:ef:79:f6:56:83:
0b:b5:b1:7b:91:62:cd:cf:c1:61:bb:aa:74:9e:90:b5:dd:ce:
61:64:40:80:2b:f8:5f:a9:d4:e4:94:6c:96:df:43:46:0a:9a:
1c:3c:0a:bf:6f:56:b0:b1:51:71:cd:00:d8:1e:9b:eb:59:60:
eb:a6:68:c4:43:7c:c6:ff:3d:ab:5f:fa:5e:e7:92:cb:69:55:
87:5a:6c:b2:0e:d7:3f:42:62:06:c9:e8:5f:0b:d0:0e:f5:27:
14:21:eb:37:89:6e:2d:ab:90:11:90:17:87:3f:05:45:22:0a:
22:7b:63:3c:da:c4:4a:5b:9e:8a:00:41:35:3d:5c:e3:3d:2a:
98:06:34:bf:d6:b8:b4:11:8a:a7:ba:19:a6:1f:3d:09:33:e4:
a6:cc:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:08 2026 by rpki-client