Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
File: OQo4N6umkSos8p5hDaSVVd8sb6U.cer (raw, json)
Hash identifier: k2TSLr3itjG5ohGk791vOQYc+85/z3kRcY+R4NoUtoM=
Subject key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A29
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 13:50:57 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31273 (0x7a29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 23 13:50:57 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:70:96:e9:17:0c:a9:64:47:91:d6:2e:03:
92:6d:4c:c9:df:82:8c:7a:bc:1c:32:8f:0d:54:3d:
bc:ad:07:e5:62:d0:45:c1:29:f1:a7:85:38:0e:cd:
fc:bb:be:42:60:9d:f9:81:c2:b1:76:f5:55:eb:7e:
a3:8e:da:58:61:04:42:ec:be:3f:05:cd:2c:d9:de:
89:45:67:71:63:63:e3:c5:9e:3a:d4:78:da:51:97:
27:16:a3:12:23:7f:63:4d:d2:3d:81:7c:29:45:1d:
f9:df:b0:2c:a2:6a:6e:6e:c9:8e:af:32:a3:eb:ef:
ad:08:7f:56:f6:aa:3b:39:28:1a:13:ed:ec:f4:81:
55:75:73:24:60:cf:32:5a:a2:d6:ca:15:5e:79:a3:
6c:d3:90:98:3c:54:07:d0:3c:f8:00:7a:e6:a8:f6:
a8:3d:95:22:12:e0:e0:a0:33:4a:87:d8:06:a1:f8:
e2:45:21:ad:d7:10:20:cb:f3:ec:08:e8:3e:0a:61:
a7:0c:34:7b:1e:e3:09:6f:fb:09:6b:0f:59:3d:56:
4b:ad:ec:a2:2b:80:49:9a:98:bb:9a:53:1c:67:df:
3b:65:45:ba:3b:ce:4d:b7:19:f7:d3:db:82:34:3d:
25:1f:6e:25:9e:86:14:9c:1d:a1:37:ec:e9:c1:bd:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.240.0/23
Signature Algorithm: sha256WithRSAEncryption
05:29:58:9d:78:1c:56:82:a2:36:99:97:03:f7:5a:15:70:1b:
2c:be:93:c4:f0:c1:ae:2f:74:2f:b2:04:b2:f8:20:35:1b:9b:
91:10:7d:14:77:83:d5:8d:c7:14:d8:d7:29:00:a5:8d:20:4e:
92:a3:ad:36:6a:2d:2b:1e:c1:9b:ef:70:02:da:e8:d9:ed:7e:
45:bf:b7:60:c0:92:69:ea:46:96:11:55:7f:f6:c7:79:59:85:
e8:e9:43:0b:4b:1a:bb:8d:e3:51:b9:70:3f:b4:f0:39:e9:22:
20:f6:0c:df:57:19:1f:40:32:47:ce:f7:89:f0:c7:2b:7f:e7:
a8:6b:c2:3b:95:e8:22:41:f9:b3:69:63:cd:cb:3d:24:54:33:
f6:57:ca:3e:d0:c9:6c:92:00:08:1f:de:5c:27:65:8e:33:65:
6a:ed:3a:57:80:d0:de:03:8b:8f:f2:83:c2:57:83:f8:94:c8:
1a:3d:a6:19:70:e3:07:77:cb:7c:7b:e4:79:7a:16:b8:d7:4d:
fb:49:5d:fc:85:68:b5:03:c1:e2:f1:09:28:01:8b:19:15:b7:
c3:84:20:35:37:37:1d:78:f1:c1:c2:1b:bc:74:07:cd:a0:c2:
61:15:e1:e7:70:a1:50:01:bc:1f:b0:7f:b1:b7:04:8c:f5:59:
29:b0:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:06 2026 by rpki-client