Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
File: -S21ujUS5Gp82_tLNRS9b_hcjz0.cer (raw, json)
Hash identifier: 7+1pr98Z8t261QvCM7ZYA2VmFGpbCsrNXSzIAttsJU0=
Subject key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Mar 2026 03:35:33 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.242.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30903 (0x78b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 19 03:35:33 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:38:3f:be:c7:35:ea:00:fe:90:25:56:11:
38:6a:db:dc:14:ef:67:05:42:a2:df:c7:9c:cc:fe:
7f:8d:31:6a:3b:12:3d:41:08:8f:6d:b3:07:f0:e1:
18:ae:26:66:22:d3:b1:20:17:9a:4a:2f:47:72:85:
a9:95:47:d1:a0:86:bb:21:e0:98:c1:b1:fe:c5:52:
12:02:65:46:dd:88:6e:fe:56:6e:8c:f6:7b:80:44:
03:39:fb:52:88:fd:c7:45:37:c5:a4:35:4e:a1:28:
15:1a:fd:55:28:c3:04:8e:25:42:fa:33:42:21:0a:
69:af:9b:79:82:b9:e6:89:1b:6b:1e:89:76:3b:bd:
7a:3c:94:65:78:b8:6d:3b:a3:29:0c:a2:3a:08:3d:
18:0f:5e:64:e7:bf:87:c6:da:b6:55:b3:90:6d:45:
f3:92:ad:7a:19:8f:2a:5a:7d:71:73:8b:d0:47:ce:
cc:f0:9b:6c:9f:39:b5:8f:72:c1:ad:b3:37:fa:6e:
1b:76:b5:73:af:3f:eb:fb:b8:b4:c7:c8:5d:df:e9:
24:81:b4:33:74:cf:04:b1:e1:a0:09:08:0b:f2:99:
04:1b:c0:b5:80:5a:73:98:6c:35:65:d0:ad:94:64:
d0:1a:0b:4d:62:94:c2:0c:05:db:64:6e:b0:ee:b9:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.242.0/23
Signature Algorithm: sha256WithRSAEncryption
09:6d:fe:de:5f:56:d2:cb:b5:9b:41:c7:23:94:68:bf:10:3a:
da:bc:20:6e:d9:1d:ae:b3:03:34:d4:98:26:c4:e2:b5:bf:c2:
ff:f2:7c:77:62:5a:89:e9:ea:78:c1:e4:0c:8b:69:ae:77:72:
d8:1b:b7:20:13:cf:2b:89:d3:fe:d4:3e:69:3a:eb:ff:d7:fe:
08:e4:f7:58:07:8e:e8:9f:25:e9:b6:b7:e6:c6:74:17:32:7a:
a7:08:d3:f2:d2:4e:37:87:6a:60:1a:0a:bf:0f:bc:98:05:8c:
29:3c:5a:83:12:4b:15:4c:cd:21:0c:d4:46:d2:02:ea:74:fb:
33:05:d5:70:67:c8:de:1c:b5:91:38:9f:ca:70:67:88:43:72:
b9:60:6b:32:49:e5:61:d3:27:1b:74:a8:47:62:11:ab:4f:db:
79:09:48:9d:5b:9b:8e:08:3f:4d:b0:64:81:74:8d:26:36:4f:
60:a1:50:50:12:13:a7:27:be:a2:ed:94:5c:11:4b:ff:15:90:
61:98:2d:d6:53:e9:c4:4b:8e:31:d8:c6:90:65:33:ae:1f:ac:
68:8b:45:35:6a:e9:cb:c4:6e:51:ab:02:4b:86:94:06:cc:f1:
66:69:cb:16:a5:fa:88:69:58:2a:c8:07:2a:10:15:71:f2:31:
db:8c:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:29 2026 by rpki-client