Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
File: PzD_G7sm8QLtikdaS_vJQqHfMoo.cer (raw, json)
Hash identifier: lx2vv4mv/74eJweRX7LdtmMuAOorqzyNvM7wjmkkxHg=
Subject key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B2D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 10 May 2026 00:12:12 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.84.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31533 (0x7b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 10 00:12:12 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:be:64:8c:8a:3c:fb:70:65:de:38:1d:7d:
16:09:f4:15:1e:d3:21:d6:ab:97:df:6c:de:24:da:
3b:37:33:db:6e:ab:e3:cf:8b:77:e1:10:51:6b:5b:
b6:64:91:d8:15:e7:cf:f7:13:e0:86:0e:9e:90:68:
83:4d:5c:ef:25:36:a5:3d:ad:a1:56:06:5a:82:74:
4b:68:a7:e5:fa:12:75:8e:73:17:40:1d:1f:5e:7c:
c0:9b:45:b1:20:b0:e7:2e:8f:55:ad:4d:bc:2e:b9:
60:65:50:65:8c:e3:39:16:a0:6d:3d:5d:e8:44:af:
f4:e2:3e:c2:af:e5:51:c2:79:e6:67:78:a5:e0:65:
da:8e:65:b7:9c:5b:aa:ba:0c:f1:a8:85:1f:00:76:
17:5d:23:b3:59:69:8b:23:f9:e3:af:85:15:4e:9e:
15:a4:34:c7:2e:0b:80:04:32:65:18:be:3d:c3:c2:
0b:fc:b8:02:5e:48:2b:8b:0e:ef:cd:36:62:af:fa:
a8:18:8f:41:cd:10:62:58:20:01:29:9e:62:74:26:
0b:60:e5:c1:a6:50:30:ab:c2:4e:e6:53:03:69:14:
77:0a:05:29:2c:b8:8a:bc:18:7d:4e:6d:90:5b:86:
4f:25:6a:0d:64:02:7f:58:6e:f6:a0:de:bf:e4:e8:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ca:a0:b5:18:0e:c4:03:b3:f2:88:37:cf:3a:06:04:ad:97:
22:0b:54:d9:2c:a8:ee:05:e4:ba:d6:e3:33:07:bf:fd:54:4d:
df:21:b4:95:11:29:05:a8:5f:d3:2f:fd:ff:17:0a:c5:9b:57:
c1:1c:0a:aa:5b:57:60:c2:21:e6:b7:50:5c:71:ad:b4:eb:ae:
63:5d:49:ef:61:1e:00:ac:ea:e9:48:c0:99:07:f6:97:a3:71:
52:c8:d7:5a:bb:41:75:ee:87:a0:29:53:8b:4e:c8:35:17:a1:
d4:33:f9:aa:76:5f:16:e6:2f:4b:cc:ee:c2:72:f7:ea:f2:c9:
5d:1c:d7:5a:ee:cc:62:81:3a:ba:99:dd:3c:1a:3d:ce:0c:78:
f0:c2:3a:3f:09:cf:0a:6e:24:c5:a9:2a:e3:f0:c2:53:7b:24:
d8:60:f6:ad:aa:c5:07:88:74:77:9c:1b:cf:dc:c3:b1:21:7d:
69:4c:0c:02:2a:20:48:d9:20:46:bd:f5:08:34:fc:1b:9c:0c:
37:b6:5d:9d:4b:96:36:d4:30:7d:31:da:92:a5:7c:bb:0d:e3:
77:c6:7c:b4:37:76:6e:9e:b9:a3:37:35:d9:8a:b6:56:c8:e9:
57:70:81:72:be:6c:cc:31:e9:34:fe:ed:ce:f4:35:51:20:df:
a5:2e:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:23 2026 by rpki-client