Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
File: PXsVvXfZuXTjc1jadU3-qSkeaDo.cer (raw, json)
Hash identifier: vq2WtWne1WR7iYPWEfHBdkpAufkjaR/YlatXUGB4DmE=
Subject key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Mar 2026 23:04:44 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 3491
AS: 6279
AS: 7262
IP: 63.216.0.0/13
IP: 65.72.0.0/16
IP: 205.177.0.0/16
IP: 205.252.0.0/16
IP: 206.161.0.0/16
IP: 207.176.0.0/17
IP: 207.226.0.0/16
IP: 209.8.0.0/15
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30972 (0x78fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 26 23:04:44 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:34:96:7f:5b:ea:b5:a5:a8:b4:db:10:50:
02:ea:d6:9f:a6:33:14:79:e8:4a:44:5b:40:bc:3d:
66:d1:00:fa:fa:77:5a:42:2d:df:24:8b:a7:41:b6:
a9:75:34:28:1d:a3:dd:54:4d:8a:4f:d1:79:f3:d9:
87:50:88:f6:04:19:75:99:10:8c:cb:5f:80:08:7c:
59:27:7e:a5:a6:3b:de:61:3f:32:cf:d2:00:1b:f2:
ad:4c:1a:fd:26:7b:69:7a:fa:4b:39:5c:17:66:dc:
85:84:a1:bb:54:50:10:14:6a:0d:c8:b7:4f:a0:cd:
0d:0b:8b:62:52:a3:af:fd:32:f3:55:81:5b:98:65:
f8:5b:c6:2b:c4:ba:7f:c8:1f:c5:ec:2f:85:d6:cd:
ec:00:8b:37:cd:d7:cb:cd:6e:21:88:45:97:e7:ed:
51:40:ac:d5:88:5f:2c:bd:89:5b:b3:aa:11:87:0a:
91:e8:96:ae:bd:af:3a:44:0b:59:e4:35:92:25:08:
03:0c:35:68:aa:f9:67:d3:eb:48:e2:85:92:e9:75:
e0:15:ca:e6:75:a1:3c:7a:78:01:e1:1b:64:22:41:
39:6b:20:e0:37:2d:23:d8:6a:3a:86:b7:35:ba:85:
0b:f0:eb:d3:6d:80:f4:92:50:54:3f:08:8a:93:9c:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3491
6279
7262
sbgp-ipAddrBlock: critical
IPv4:
63.216.0.0/13
65.72.0.0/16
205.177.0.0/16
205.252.0.0/16
206.161.0.0/16
207.176.0.0/17
207.226.0.0/16
209.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
87:ed:0e:c5:6b:d9:95:cc:0e:d5:e2:4d:a2:ff:4d:a2:f5:13:
44:1b:04:fa:4d:c0:2d:6e:ee:ed:73:ca:1c:9a:33:60:d8:33:
cd:ba:e4:ee:8f:e4:ec:75:14:43:45:c6:5b:7d:09:74:0e:0f:
2f:51:c2:f6:a2:ad:70:aa:9d:8e:b0:e6:c2:6b:c6:a3:c9:ac:
27:20:a9:7d:c6:01:63:4e:cd:3b:fb:bf:b9:29:c0:04:b3:a1:
e6:88:21:fd:0e:fc:10:12:c2:e9:9d:b7:7a:47:b2:fb:e3:83:
67:31:fc:00:a7:14:44:5b:1b:1e:0b:38:c7:6a:56:9e:95:58:
b7:dc:6f:c0:fc:ea:a4:28:39:51:4c:5c:09:94:b3:0c:14:57:
16:da:d8:44:79:13:e2:37:b1:8a:73:b5:26:d9:83:38:ca:27:
97:e7:d8:6b:ab:9e:34:59:51:07:7b:a3:aa:e1:9a:f9:03:1c:
88:c1:92:a6:bc:94:cf:ed:d0:58:01:31:6e:16:fd:87:24:b6:
ee:3a:20:45:6f:f6:31:db:ed:12:7b:c2:45:a1:67:b9:0e:36:
d3:d2:bf:23:e2:ff:e6:b9:66:58:ec:5e:7b:c8:f9:9b:09:67:
d1:8d:c5:19:e1:98:b9:79:d3:3a:94:6a:fa:e6:29:60:9b:4b:
36:04:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:33:25 2026 by rpki-client