Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
File: CzDLxzPdxGhrNFVM7pbifWHsnC8.cer (raw, json)
Hash identifier: Ykbf4/F3Ijo7ulXXXiVj1yKPb3wMX1xlfwQYARMRzIg=
Subject key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7890
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Mar 2026 08:42:04 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30864 (0x7890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 16 08:42:04 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:33:d1:1b:06:96:ea:b0:57:9c:54:60:a1:
21:e8:dd:b8:af:79:6a:55:18:60:fa:2e:e7:e3:d7:
63:28:ea:b2:41:46:8e:d7:21:7c:0e:54:93:3d:77:
86:ae:ad:3f:a2:32:93:e2:55:5e:8b:bc:94:c5:d9:
d7:d8:6d:c9:de:0d:45:44:71:ed:d4:18:44:6e:9a:
14:6a:b2:c3:f9:ef:12:bf:42:5f:aa:8d:4d:c0:a0:
20:f0:c3:9f:32:29:bf:d1:1d:17:f9:ca:38:8e:29:
0d:a8:1e:00:8b:a7:b4:b4:ba:79:8f:85:b9:97:23:
dc:68:52:e7:ca:ca:a3:ca:b7:77:be:60:aa:bd:f8:
d0:e4:30:ba:b2:3d:72:a0:51:37:3d:70:96:23:ff:
9e:dd:49:95:dc:dd:1c:11:e4:e1:43:bd:68:4b:c0:
33:9d:43:e6:a8:f9:6f:82:76:b5:7c:a8:3c:aa:08:
43:61:2d:1b:01:92:79:e3:58:15:a7:64:7d:7e:93:
14:92:61:fc:e0:3f:34:dd:1b:f0:6d:c4:1a:94:e5:
84:f0:33:83:4b:2c:d0:a5:07:60:a5:11:87:64:76:
b1:08:6b:f1:09:e1:36:e7:f9:77:e7:b6:4f:c3:42:
ae:d8:d0:13:14:63:59:0b:9d:aa:9e:ca:35:ed:6e:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.148.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:ba:0c:29:e2:93:7b:25:36:ce:cf:d5:18:93:93:cb:cc:7f:
fb:60:7d:58:c7:0b:56:b9:9a:84:73:2c:08:ad:60:7f:ac:27:
78:90:0b:65:5c:64:c9:ad:38:5d:52:d3:aa:d1:c2:d8:1e:36:
bc:45:26:ec:2c:d8:3c:db:df:ce:96:f7:b2:b0:eb:d3:f0:a4:
34:ab:4c:3c:c4:98:ca:a4:42:ff:85:4f:bd:55:ba:59:1e:6c:
37:46:db:97:c1:15:d3:2a:38:a5:98:7d:89:2d:09:f4:1b:82:
e2:3e:3b:d2:2d:c3:1c:13:5d:4b:b9:9b:1b:dd:81:7f:56:5e:
d2:f1:01:74:9f:88:ab:f5:fe:d5:cc:41:67:a2:3b:79:75:b0:
3e:ec:81:7e:03:c8:27:5e:c0:79:a2:21:67:e4:51:3d:48:fa:
e2:06:94:47:36:c4:56:45:d1:55:26:39:2c:3a:ac:5f:e9:2c:
60:e2:59:ba:28:44:c7:35:f0:06:f4:8a:c0:f8:6e:4c:ce:c4:
10:ad:8f:6e:d7:1d:b0:92:18:24:4f:31:ea:f7:55:54:aa:de:
cc:a2:a3:8e:f6:a8:e3:0b:8a:90:e6:6c:6e:b3:ff:6a:31:a0:
2a:9c:27:49:51:09:19:ac:de:d9:58:23:85:4d:d2:8a:be:07:
d3:ad:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:33:15 2026 by rpki-client