Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
File: 3eQo-rsWskLR46Gm8A_V48OKpY8.cer (raw, json)
Hash identifier: ZqbP3xipteb7AQznRITUGlDcfPn2z4Vuoh88UdDkKqI=
Subject key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029D67
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:02:00 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 202.0.84.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171367 (0x29d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:02:00 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:ab:d0:f0:9e:40:ec:a0:97:e8:c9:05:fd:
2a:94:b6:40:91:47:c5:84:6c:73:fc:69:52:68:36:
ab:5f:56:7d:0b:88:20:e4:e1:ef:de:b0:db:a2:14:
1c:93:c7:9b:56:87:6d:d0:d0:f2:79:fc:01:28:97:
6d:46:45:b7:01:fc:58:f9:30:cf:f7:f7:d0:18:4d:
96:5f:21:2e:78:6d:c8:1b:90:2e:a5:d2:71:3b:ee:
d4:dd:0b:23:fb:04:89:d6:e1:62:94:1d:1d:12:4f:
ff:ef:8f:7b:15:5a:c9:f2:25:c7:4e:ae:9c:18:a7:
fc:26:94:c7:65:68:98:9b:ed:8c:39:a7:e8:55:a9:
68:e9:0d:3a:bf:26:15:d1:c7:c5:83:ad:22:23:f7:
b6:71:21:13:34:28:ba:92:88:b2:90:86:b1:9d:23:
49:b5:d1:37:87:e3:89:09:11:1e:de:de:a3:94:70:
58:f3:3e:cb:05:37:3d:b9:95:d4:a6:9f:0f:8b:c9:
4f:1a:a3:77:0b:8d:e0:6f:b6:97:eb:b6:be:61:85:
a6:a9:8e:8b:eb:0a:7a:ef:57:0c:c0:ca:54:65:cb:
d4:38:76:d5:fa:22:2e:e7:66:bd:ab:cc:4e:90:c2:
ef:ec:cc:d1:e7:2b:75:10:4c:d0:f2:96:9b:63:09:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.0.84.0/24
Signature Algorithm: sha256WithRSAEncryption
77:25:a0:94:8a:8c:06:f7:c4:2c:7e:5a:fa:a0:ad:bd:d2:86:
9d:f1:a4:95:66:3a:ea:6a:f4:45:a6:f3:23:8d:14:d9:12:f6:
c8:28:4e:50:14:15:78:05:f6:27:bd:55:be:00:e1:20:11:a6:
b1:24:e4:02:8a:f5:f6:05:b8:82:b4:a9:76:9e:d1:eb:76:b2:
89:1d:f8:27:a3:cc:a2:34:37:e9:e4:cc:fe:84:a3:dd:a0:c6:
3b:11:5c:e6:ed:3e:75:45:3b:7f:4b:58:16:1e:c4:8f:d0:86:
a3:51:f3:0d:4c:eb:83:6e:a9:92:52:0a:19:dc:56:34:e3:88:
b3:f3:93:83:4b:eb:1e:13:25:56:1c:df:93:20:a2:1c:9e:fa:
05:36:37:37:53:83:2f:f4:f5:ef:ab:e4:60:2b:09:93:fb:2e:
09:d9:c4:ca:3a:98:95:e3:db:61:88:f2:9b:45:ad:c5:11:bb:
3a:1b:e0:02:72:9e:e4:d7:3a:3a:e7:71:8d:fa:ee:c3:ea:cf:
a4:4b:07:77:90:d0:4b:a3:4c:c4:be:40:09:24:b8:8e:c4:5e:
f1:61:3a:2c:4c:31:1f:59:00:ef:35:3b:97:65:4a:e6:bd:ff:
58:a8:0c:fd:ab:1c:3d:86:0d:2a:fb:f8:d5:4e:77:5e:17:b4:
6f:93:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:38 2026 by rpki-client