Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
File: 74BCtCGhAXh1OrlTjaNDuJh4nbs.cer (raw, json)
Hash identifier: zBEVlcfy6dEifNCZmglmwkYeq8ogK1eFS7cguXJSuxM=
Subject key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0292EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:12:39 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 149171
IP: 2001:df6:bec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168682 (0x292ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:12:39 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:99:24:64:72:9e:20:f1:fe:7f:50:91:4c:
41:c7:8d:57:8a:a8:30:ea:d2:e5:21:0a:95:fd:05:
61:22:8d:17:84:c8:60:74:5c:9b:76:9e:17:ba:70:
f2:57:1b:0f:8f:a9:7b:0e:d4:b8:48:57:7f:02:30:
ef:92:7f:b5:2a:06:2f:27:0d:5d:e6:03:f8:a9:60:
eb:c2:7b:f5:bb:70:c4:3c:ff:b5:57:63:3c:00:0e:
01:3a:4f:42:03:75:75:66:be:c5:e7:e7:81:6e:42:
a7:14:0a:eb:b4:17:8a:14:6d:79:a4:93:bf:38:61:
5a:52:fe:b5:ed:b5:e5:9e:b0:20:38:66:f8:a8:fb:
47:b6:8c:9d:4f:5a:9a:83:da:82:7a:57:49:3d:d9:
1d:18:d5:2d:68:df:ec:bc:5f:d7:97:7d:2a:04:b9:
fa:78:e9:03:9d:f6:93:d4:66:e3:3f:9b:8c:d6:9a:
ec:0b:b8:cc:3f:2d:e2:88:f9:f2:c5:5b:55:54:5f:
57:82:12:eb:7c:59:97:5b:b4:2f:f1:49:07:17:55:
21:be:93:71:10:ed:f1:52:7b:aa:ba:15:4b:f4:fa:
1d:24:17:31:f9:95:77:d7:82:00:ef:84:1e:fc:f5:
9e:88:9d:cd:5f:f8:36:5f:47:bf:ad:9e:c9:63:ac:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149171
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:bec0::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f6:72:86:ce:bc:16:73:46:02:aa:3b:31:53:b5:4b:36:2d:
70:6a:37:5f:f4:87:1a:8c:0e:0c:c8:17:80:5c:c7:f8:e8:3e:
8d:93:10:6a:fc:14:e6:2c:82:b3:76:cc:95:80:02:a3:98:31:
6d:5a:1b:a4:c0:74:68:af:92:77:fd:aa:e6:b4:d4:e1:ee:c5:
d3:cd:da:0a:66:9a:75:cd:72:10:2f:d3:5f:b9:24:5c:13:1d:
52:92:08:b7:7c:d4:aa:1f:18:ec:66:c8:89:28:68:42:49:30:
2b:6a:36:4c:4e:e8:63:63:c1:02:9d:be:91:20:cb:9f:a9:f0:
07:04:a1:bd:a2:a0:a8:3a:04:81:81:50:fc:d7:93:0a:c8:9d:
71:36:d6:31:2c:d4:31:e4:c4:77:1b:a6:39:27:40:cb:14:ca:
da:36:97:c8:62:d7:1f:d4:88:52:ba:b6:37:04:0a:10:1c:57:
4d:eb:85:2c:67:cc:c3:69:88:9d:9a:e1:7b:5b:85:2d:a6:e2:
bb:fd:80:6c:cc:a7:db:37:8e:4b:34:0d:f2:a2:b1:e1:63:ea:
ed:0f:94:d4:36:de:99:ec:d7:a4:e2:b6:05:44:8d:d3:a1:b1:
c3:2e:bc:66:1b:07:47:0d:e5:7a:a6:b9:52:49:d2:ea:72:bc:
cc:13:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:43 2026 by rpki-client