Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
File: WfcM8WVJPKOohcgfFJYqhNv7-do.cer (raw, json)
Hash identifier: oUsKKpifPIAyPumJuQpcTWCTlIZRIYs43FLTW7mzT3Q=
Subject key identifier: 59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B1D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 May 2026 08:25:17 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 135.84.240.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31517 (0x7b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 8 08:25:17 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A917F9C3, serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:d3:70:23:c8:32:b4:10:00:b0:9d:47:9d:
8d:46:84:42:ac:52:7e:6e:34:44:d2:fe:da:32:51:
1d:e9:86:85:8b:03:0a:01:08:50:2f:af:a9:c1:26:
46:cb:4b:96:96:60:a6:eb:03:ee:70:20:2c:3a:85:
25:9c:20:07:cc:b0:d8:a4:05:6a:5f:1b:b9:5c:ca:
41:f2:14:8c:f6:82:df:8d:da:1b:55:6e:7d:5d:02:
c0:77:49:09:7b:2d:4a:8c:41:c7:2b:d5:21:cf:8f:
87:15:ab:ce:84:70:e1:bc:8f:97:46:19:02:d6:ec:
15:aa:23:d1:4e:32:1a:ae:97:19:49:ae:bd:18:11:
7a:e0:d6:74:d8:31:39:e0:01:50:bd:4a:78:dc:e0:
21:c4:ef:a3:b0:74:19:1e:bb:d7:1a:bb:e0:85:5a:
55:1c:aa:0c:bc:0e:7e:11:5d:3e:64:0b:7d:2a:e0:
10:db:b1:fa:c3:54:3d:23:a9:12:13:4c:10:20:6a:
92:bf:c9:9e:89:a1:a1:94:2a:5b:96:da:f0:0e:c0:
5b:7f:05:73:25:f9:c1:8c:d3:3e:30:11:cb:ed:3f:
17:89:c0:d6:d2:09:35:e2:58:33:2b:52:25:3a:29:
d6:1b:13:5c:84:68:54:01:b8:73:ee:e0:32:b3:98:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
135.84.240.0/20
Signature Algorithm: sha256WithRSAEncryption
57:47:b4:d1:fc:6a:58:1f:96:15:5e:d5:8f:87:4f:cc:ea:aa:
16:eb:eb:9b:1b:77:47:38:7b:9e:dd:2f:3a:0e:5c:15:72:92:
32:af:cc:0f:d9:d3:c9:35:6a:b2:ad:03:89:79:fa:ed:b4:88:
2b:d9:6b:e1:25:54:3a:58:96:96:3d:c9:eb:6b:2d:2b:6c:4a:
4f:e3:28:32:69:21:82:d8:2b:bf:9c:2d:4f:25:ca:86:88:ce:
db:bb:f0:c1:f5:62:6b:93:36:7a:ba:99:b4:18:c3:c4:37:cc:
04:0e:87:c0:e2:d3:14:98:dd:5b:be:92:c5:ef:c1:55:de:7c:
58:7f:37:c8:f2:ff:69:ac:bc:3b:78:6f:e1:6b:05:be:61:fd:
bf:7d:6a:82:92:fc:47:a4:f7:7d:a1:2c:4e:6b:c4:ab:d4:ec:
49:b8:df:57:a5:5f:ab:de:e1:e0:be:d8:7c:74:bc:40:1b:43:
65:c0:00:49:23:f5:fe:a2:2e:c7:02:1a:85:0b:fb:60:d2:10:
26:85:1b:9a:21:bf:5b:a2:b2:c2:b2:92:ce:4a:74:7e:c6:69:
c5:81:57:2f:4c:98:d8:22:3e:e5:27:af:c5:42:b9:87:5f:cd:
e6:d2:c2:7f:78:de:0e:92:35:59:cc:21:03:49:e8:13:59:a2:
ba:25:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:27 2026 by rpki-client