Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
File: RrMUYkbIqOvcBwyRKtn1czFjUfM.cer (raw, json)
Hash identifier: mqJUTYCzb+++uqzmLlRJk676mi2VYo+RKBgEtugHnno=
Subject key identifier: 46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78C7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Mar 2026 03:38:20 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 167.179.212.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30919 (0x78c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 21 03:38:20 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A913B25C, serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:3e:3b:77:04:07:f6:54:95:bc:a6:32:1a:
7d:05:7c:c7:19:cb:fa:05:0b:68:d4:8d:d5:cd:31:
d9:08:ee:cb:e7:7b:14:ac:c7:50:48:2f:5b:5a:21:
c0:01:9f:5b:0d:7f:03:95:23:fd:06:50:30:7d:4f:
29:6c:52:d0:0b:33:07:f8:39:65:12:1b:c9:07:86:
4f:eb:3f:7a:4a:5e:44:62:8a:df:10:78:9c:5d:12:
a4:b3:a1:06:68:2b:cc:57:3f:12:ec:ea:44:22:9a:
be:6f:eb:2e:1f:c0:53:f6:4c:41:76:f7:fa:15:c5:
82:e7:7b:8c:79:db:22:24:9d:bc:5e:58:fd:c5:13:
cb:3b:fb:8a:a3:96:a6:da:95:57:15:e4:61:f5:f3:
d1:d1:9e:af:64:8d:e2:79:c0:8d:4e:e1:70:ef:0d:
ca:f8:01:e2:44:a9:44:93:d1:08:5b:5d:3b:7c:2d:
da:37:21:d1:84:e7:9d:79:c0:79:0b:8a:c3:42:e3:
41:de:b1:cd:ad:4d:04:e7:ca:f3:f6:85:04:84:fb:
21:52:29:dd:8e:0b:15:83:2c:e2:94:01:00:85:f7:
a4:a8:3e:f3:0c:17:60:4d:f8:cf:8c:5d:3c:75:56:
3f:17:7a:33:3d:2e:6c:53:24:22:f5:b3:21:32:3e:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.212.0/22
Signature Algorithm: sha256WithRSAEncryption
04:e4:83:b5:ec:fb:a6:00:fb:f0:22:d3:e9:2a:92:cf:97:20:
2f:99:ff:ad:e7:f1:c8:da:ae:2a:a1:5b:88:c1:55:77:77:57:
49:a1:12:43:8e:c7:01:74:8f:69:c6:4f:48:24:1f:13:8a:40:
b3:44:11:62:14:ce:20:3f:c9:e0:94:6d:a7:54:f3:1a:57:04:
de:89:82:40:dd:e1:dc:8d:3c:ca:41:df:40:4d:ed:02:42:33:
1d:95:87:b3:19:76:8d:25:aa:f2:d3:0a:bd:e5:93:70:c2:37:
14:f8:05:2d:42:f3:c8:a8:6e:d5:49:90:7c:37:b3:db:c3:7a:
98:e5:48:cc:c9:ca:40:6b:dc:d3:c7:af:e2:ad:f4:94:ee:90:
07:6f:1e:59:9a:a3:9c:aa:ae:b0:31:67:a4:b0:6d:82:1d:27:
fc:62:6f:2d:33:42:e7:93:5a:f5:2b:f8:73:f6:ea:2a:7c:40:
3a:0c:9c:5c:7f:a1:b6:cf:0a:3b:60:c5:02:b4:77:37:ac:6b:
dd:3c:9a:0b:4c:ec:b9:ff:a8:4a:89:a8:c9:45:a5:60:e5:f2:
38:b0:6b:15:80:d0:88:8f:11:67:7f:4b:af:59:b4:4e:3b:da:
73:0d:e0:e1:df:5c:21:44:e2:c8:3e:12:77:af:f2:6e:23:a0:
24:16:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:13:14 2026 by rpki-client