Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
File: n7vSMFYWjRpRfpltxW9mSm7lLqU.cer (raw, json)
Hash identifier: 5YKcUjeHXqeraXwfGaaKhKiA8bw6CjGhqcEypYyU61E=
Subject key identifier: 9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Mar 2026 04:05:44 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 146.88.84.0/22
IP: 198.148.192.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30921 (0x78c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 21 04:05:44 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:ee:c1:9f:8b:fe:6f:a5:34:03:0c:18:f3:
bf:fe:8a:16:4b:1d:1b:e1:8e:0b:ff:61:3e:72:93:
f6:0d:30:dd:70:32:7b:89:27:89:ea:9e:0d:eb:6d:
60:0a:6e:6a:03:b5:da:6e:63:5b:58:75:e0:e2:96:
ac:34:27:b3:37:a7:19:90:cc:63:22:ac:6e:c2:02:
56:aa:e9:ab:e3:17:0b:68:60:9e:b8:57:5d:2f:12:
a4:06:52:48:91:83:8f:df:2e:4a:14:a5:71:db:f8:
21:82:b6:a4:07:6c:c2:48:63:e7:fc:87:8e:e2:e5:
34:56:86:11:bd:3d:f9:e3:e2:1b:9e:cc:67:ab:b1:
a5:22:1c:48:08:3a:08:bd:95:b9:8b:3f:6f:71:e1:
85:cb:cf:ad:e4:2d:6e:74:62:45:fb:6c:6e:7b:c4:
40:66:d0:08:72:f4:c3:18:9b:ee:bc:2b:f6:cc:07:
f1:f1:4a:0e:f7:96:d6:85:69:8c:ae:17:39:17:6a:
4c:33:20:45:6e:ee:00:fb:98:dc:b8:4d:68:f2:16:
48:e1:26:08:f2:72:a7:4f:92:23:0e:ac:40:09:37:
4a:ca:69:51:93:4e:b8:93:c1:c2:1e:f5:3f:3d:28:
28:1b:fb:06:29:15:d7:0e:13:c1:12:17:03:c5:88:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.84.0/22
198.148.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:c6:d1:53:91:02:b9:67:de:0e:f1:8a:2a:72:6d:8f:f0:d0:
53:f7:5f:cb:ec:12:29:83:2a:52:be:f9:39:53:6e:fa:74:a6:
65:27:47:6a:d9:7b:50:11:93:29:76:75:8e:d4:e4:19:04:ed:
0e:ec:e1:26:7c:26:4e:df:5a:83:26:04:04:64:49:ac:48:93:
5b:e0:37:1b:ab:02:a8:dc:95:1c:f8:82:29:db:06:9d:ec:21:
06:8b:95:76:cd:26:01:57:80:6f:ec:5d:1f:b9:3b:1c:23:6f:
d1:7c:73:f6:81:0d:40:76:bf:c4:49:f6:7b:ac:b1:cf:c6:31:
57:dc:49:46:fb:91:de:91:16:dc:10:c5:ba:6c:81:93:9c:b6:
0f:92:20:6d:85:57:ea:84:d9:3f:86:5f:46:49:d8:17:46:59:
dc:54:95:ea:b5:6c:25:09:ab:92:f6:ca:cb:9e:ae:02:b3:53:
f9:85:77:f5:4c:3a:fc:0b:27:f0:50:c3:c0:72:33:50:c3:e5:
9c:b1:31:b5:29:58:43:94:13:ed:0d:7a:38:fc:14:3d:a9:ce:
77:c2:a0:a9:ca:c5:0e:29:89:7b:ad:f9:07:8b:1f:9f:c2:62:
c7:e4:51:0b:c7:ad:f1:a1:48:a3:8b:43:8b:38:73:74:17:ff:
04:22:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:13:30 2026 by rpki-client