Certificate
$ rpki-client -vvf ta/apnic/apnic-rpki-root-iana-origin.cer
File: apnic-rpki-root-iana-origin.cer (raw, json)
Hash identifier: IBQjCtSbJ3esK94JSN36S48gcRTFSeJtdV3ojDWT468=
TAL: apnic
Subject key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: 48C01F7EA180A8F951A3F54FC45E55A525E429FB
Manifest: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
caRepository: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Feb 2026 23:08:06 +0000
Certificate not after: Sat 26 Feb 2028 23:08:06 +0000
Subordinate resources: AS: 1 -- 4294967295
IP: 0.0.0.0/0
IP: ::/0
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c0:1f:7e:a1:80:a8:f9:51:a3:f5:4f:c4:5e:55:a5:25:e4:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Feb 26 23:08:06 2026 GMT
Not After : Feb 26 23:08:06 2028 GMT
Subject: CN=apnic-rpki-root-iana-origin
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:56:48:be:b5:60:00:18:ba:61:22:53:cc:
fc:a8:7d:84:4d:52:0b:d3:58:a5:c5:99:73:20:bf:
49:61:23:91:30:de:42:9a:d7:fc:57:62:5b:94:87:
9a:95:2a:a0:39:31:a3:bd:28:c4:b2:25:7b:de:ce:
bb:cd:84:08:ec:2f:e2:48:e6:fd:ea:e7:f7:fe:cf:
3a:36:a6:f1:0e:21:50:18:df:2a:1b:b4:4d:71:d8:
15:b9:49:40:89:d9:7c:5b:1b:cb:34:8f:15:86:a6:
c0:07:9b:92:83:f3:2b:2d:e4:8e:bd:74:63:6b:4e:
35:56:9b:40:c4:88:5c:1b:30:cc:be:50:09:47:09:
2b:60:af:cc:a3:c3:f8:13:6a:d2:42:0c:2a:0a:06:
9e:d1:e6:d8:d4:2b:09:dc:28:df:8b:ae:c2:d6:7c:
3b:a1:7a:89:26:8b:ef:5c:9e:1a:a4:69:84:bf:c6:
b3:db:73:8b:0b:a2:a2:e7:85:25:fc:4e:b1:93:6d:
bb:04:5b:6d:a8:55:77:60:cb:4a:c7:8d:87:70:27:
03:55:96:72:d3:59:fb:26:3c:ef:3b:c7:1c:69:79:
87:22:04:7b:ba:d9:ea:84:14:4d:36:ae:57:73:96:
61:6e:4a:d4:b0:db:62:26:6a:d9:cd:59:60:53:a3:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Key Identifier:
0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
RPKI Manifest - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1-4294967295
sbgp-ipAddrBlock: critical
IPv4:
0.0.0.0/0
IPv6:
::/0
Signature Algorithm: sha256WithRSAEncryption
23:a2:e7:2c:7b:c7:9d:68:68:a9:af:e6:be:77:f8:c7:c1:75:
82:d9:8d:57:58:b6:e7:21:b4:ff:7a:e3:f5:4c:69:20:d6:1e:
4a:52:c5:44:47:79:e1:6a:4a:4a:91:17:d5:87:63:49:ce:f7:
a3:c7:16:6a:9a:a9:48:a4:1b:26:cf:6a:45:78:c0:c0:e4:ed:
3c:c6:e7:07:87:11:1b:56:e7:b1:73:2f:1a:58:85:f0:67:e9:
05:32:c7:cb:51:aa:99:48:d6:5b:05:24:bc:b8:53:27:58:27:
3a:61:a7:5d:8f:d5:f5:62:b7:96:b2:2f:82:67:c2:9a:d7:8d:
1a:c6:15:32:df:08:b9:d3:c5:cd:fd:6f:f8:eb:86:03:e1:00:
66:6f:c4:42:0d:22:a3:fc:94:02:b6:0e:d1:b5:5b:04:cc:3c:
8d:91:c7:fc:92:c2:90:68:84:4f:06:d4:e3:95:ac:b3:00:1f:
e5:5d:dc:e5:16:f9:52:9a:52:95:2a:53:4c:c8:66:72:dc:d7:
09:57:46:bd:47:5d:98:28:24:5f:02:95:39:dc:0b:9d:aa:2d:
48:b1:d5:28:46:3d:66:14:cf:97:81:50:54:ad:b0:01:e5:de:
e3:0b:b1:95:22:19:5a:0e:b4:bd:f9:d5:ad:a1:5a:81:d9:2f:
f8:f2:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:12:12 2026 by rpki-client