Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
File: zq7A6H2VhStEwGE5VUa34MHRHFc.cer (raw, json)
Hash identifier: 3UO6aZBWGOR0DatVyrFJwk5pwODOQgg5wZC1fS3/j98=
Subject key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 76FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 02:59:20 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.232.42.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30461 (0x76fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 02:59:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:7b:3d:1a:2e:93:1d:6d:e2:68:2d:1f:80:
f4:ad:7e:4a:c4:15:7b:e1:39:3f:3a:1a:9f:8e:a5:
2c:52:ef:e3:fb:c3:00:32:c2:d2:d5:19:29:95:f3:
fa:97:f6:eb:bd:e9:0b:ee:35:47:38:99:49:5d:64:
20:5f:db:69:a0:5b:32:9f:23:50:0a:6c:15:3c:18:
0c:ca:f1:3b:f3:3b:dc:8e:e6:85:ba:91:49:26:5d:
5d:45:52:d9:65:b1:1f:5b:51:69:78:3a:d5:29:b4:
11:8d:ff:04:20:55:cb:fd:70:01:d9:76:74:56:33:
46:39:52:26:67:7b:05:42:b2:94:69:ca:2a:27:47:
0f:56:92:e9:e2:0b:be:5b:dc:37:1e:c9:27:2f:13:
d3:00:3d:8d:74:e4:3f:6c:87:f3:9e:b1:f5:37:90:
1a:45:cc:70:dc:b7:82:8c:ec:3b:8f:52:d7:c1:ca:
fe:0c:2f:45:44:50:d8:86:39:60:30:97:a3:e6:4e:
3e:0f:5e:56:55:76:51:f6:11:ab:79:4e:da:d0:a1:
04:95:4a:8f:f4:05:ea:3d:79:42:17:ff:48:a7:b0:
72:6a:86:e4:b9:04:90:09:20:02:8c:3a:53:34:e0:
2c:6b:3a:91:d2:84:f9:29:13:c8:af:d0:4c:2a:a9:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.232.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:51:73:35:5e:c2:2a:50:58:fc:23:48:a8:a0:95:32:4a:65:
db:28:cc:74:e5:1c:c3:9e:c3:74:70:0b:f2:cc:40:57:bb:69:
28:29:7c:7e:69:58:5a:67:c5:20:f8:83:c2:6d:19:4c:88:37:
41:d9:c6:01:75:b1:e3:52:a3:78:78:d3:14:7f:7f:26:bc:b0:
51:f1:34:00:0f:b3:ff:5e:62:c5:2d:0a:cb:29:cb:86:fd:52:
67:78:f3:17:3c:68:a0:c4:ef:26:a0:f7:6f:d6:c1:12:c3:87:
a0:3d:16:ff:7f:4c:4f:89:ed:cf:3e:f8:63:30:00:e0:d7:b6:
12:dd:9b:6e:d8:62:bc:23:6c:e8:7b:c3:97:b2:75:da:29:91:
13:ca:96:82:79:d6:92:5d:71:da:f3:37:de:2f:9b:a7:b5:55:
0e:11:34:9e:1e:1f:f3:23:f1:21:c5:9f:b9:32:43:20:46:e0:
3f:ac:6b:5a:3f:e2:91:9b:99:af:20:66:c3:03:94:27:61:56:
44:62:43:36:3f:c6:ca:29:64:a1:22:5f:a7:8a:e6:aa:19:b7:
59:ed:ae:a2:ec:3d:44:f6:b2:07:b7:3e:43:ec:10:78:47:ac:
69:7d:22:87:38:5e:b1:c0:ff:94:e8:74:dd:bc:40:02:3c:79:
ca:21:a7:14
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICdv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjI3MDI1OTIwWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4QjkwOTExMC8GA1UEBRMoQ0VBRUMwRTg3RDk1ODUyQjQ0QzA2MTM5
NTU0NkI3RTBDMUQxMUM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANy0ez0aLpMdbeJoLR+A9K1+SsQVe+E5Pzoan46lLFLv4/vDADLC0tUZKZXz+pf2
673pC+41RziZSV1kIF/baaBbMp8jUApsFTwYDMrxO/M73I7mhbqRSSZdXUVS2WWx
H1tRaXg61Sm0EY3/BCBVy/1wAdl2dFYzRjlSJmd7BUKylGnKKidHD1aS6eILvlvc
Nx7JJy8T0wA9jXTkP2yH856x9TeQGkXMcNy3gozsO49S18HK/gwvRURQ2IY5YDCX
o+ZOPg9eVlV2UfYRq3lO2tChBJVKj/QF6j15Qhf/SKewcmqG5LkEkAkgAow6UzTg
LGs6kdKE+SkTyK/QTCqpzhkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTOrsDofZWF
K0TAYTlVRrfgwdEcVzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEI5MDkvNUMyRDEwNjRFQkM5MTFGMDkzNkVEQjgzNjc2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThCOTA5LzVDMkQxMDY0RUJDOTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJW
aFN0RXdHRTVWVWEzNE1IUkhGYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAcDoKjANBgkqhkiG9w0BAQsFAAOCAQEAj1FzNV7CKlBY/CNIqKCV
Mkpl2yjMdOUcw57DdHAL8sxAV7tpKCl8fmlYWmfFIPiDwm0ZTIg3QdnGAXWx41Kj
eHjTFH9/JrywUfE0AA+z/15ixS0KyynLhv1SZ3jzFzxooMTvJqD3b9bBEsOHoD0W
/39MT4ntzz74YzAA4Ne2Et2bbthivCNs6HvDl7J12imRE8qWgnnWkl1x2vM33i+b
p7VVDhE0nh4f8yPxIcWfuTJDIEbgP6xrWj/ikZuZryBmwwOUJ2FWRGJDNj/Gyilk
oSJfp4rmqhm3We2uouw9RPayB7c+Q+wQeEesaX0ihzhescD/lOh03bxAAjx5yiGn
FA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:34 2026 by rpki-client