Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
File: _-7mekM0ZWGI_qX2-dfnpwWUnj0.cer (raw, json)
Hash identifier: jklqkk4KBnRizF87wSXiYHpd0vXc1nB21ReIhS+urHs=
Subject key identifier: FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78ED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Mar 2026 13:53:32 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 198.204.78.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30957 (0x78ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 25 13:53:32 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91ADCB5, serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:03:90:46:a0:bb:5f:ff:80:8d:67:ae:b9:
1c:f2:5e:ea:4d:4d:dd:d5:e3:eb:87:25:fb:13:07:
68:31:7b:c8:aa:aa:c1:06:03:d6:29:46:45:de:88:
00:46:a2:61:44:a6:fd:c5:6b:a8:06:89:93:55:f3:
36:89:90:eb:72:4e:8b:c8:15:ca:aa:60:57:45:c8:
7f:05:04:3c:29:f8:b4:5d:49:a8:d5:05:b8:57:16:
9f:13:47:7f:8c:e5:3e:54:ea:b4:d8:f7:ed:56:3d:
29:d9:bc:79:d4:37:2b:c1:6f:ef:c3:e4:84:f6:7e:
65:5b:1e:bb:eb:8e:77:18:a6:65:98:d6:b8:51:e7:
b9:25:ef:05:44:4c:25:ed:3a:e3:5c:2b:4b:0e:99:
6a:99:b3:21:49:91:22:11:ef:cb:ec:a5:24:8d:3e:
f7:72:4c:bb:a2:20:d5:84:c3:93:29:aa:81:85:ea:
a5:eb:5e:19:a4:c6:e6:13:3d:f2:f8:ab:6c:23:30:
f3:8b:fe:15:0a:b5:88:50:09:f5:53:af:19:db:14:
b6:ac:4f:51:71:31:ef:12:0a:ce:9e:e6:4a:2f:7d:
ff:71:45:5c:cb:f0:c3:a3:fb:3b:db:ab:28:dc:96:
96:d2:6f:18:05:37:a0:6f:3a:cf:6d:27:21:ee:ed:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ca:db:af:83:ee:e5:86:b5:c0:d7:50:a6:ab:4f:36:26:9d:
a3:21:00:46:be:8b:c4:f4:cf:c3:ac:42:8e:f7:a0:0a:ad:a4:
b7:94:92:01:01:5d:6b:11:10:22:c7:eb:4a:09:dc:4d:a2:2a:
2f:36:49:5b:9d:22:e9:76:2d:7b:b6:43:5e:ee:b8:b2:1c:13:
ec:f8:77:05:06:0b:1a:07:67:ac:70:c6:44:d6:b8:2a:7e:34:
af:89:7c:ff:22:fd:f5:05:28:6a:59:e1:55:48:56:8c:35:f6:
8e:1f:ad:68:37:b0:79:cd:b8:fc:c4:d1:26:92:fa:31:6d:1e:
9f:56:fa:c2:c1:f8:33:35:f2:db:a3:8a:d6:b5:9a:10:7c:ac:
dc:48:ab:32:33:1a:b9:d6:6e:c8:06:db:f9:d8:e1:8e:3a:bf:
ab:d8:d3:2e:22:5b:8b:c7:a3:f1:45:b3:7f:8c:94:1d:ba:8d:
23:74:17:c2:63:90:ff:70:4b:c7:c0:a4:bc:5a:f9:33:b1:6d:
89:c2:db:41:07:9f:bc:50:a3:84:5f:5e:34:be:30:bf:b9:5a:
18:9b:08:34:c7:6a:be:50:73:23:6d:13:30:a8:76:71:d6:89:
cd:3c:39:b0:87:27:4d:8a:69:30:34:de:bf:2e:0f:af:02:d4:
4a:3c:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:02:14 2026 by rpki-client