Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer (raw, json)
Hash identifier: gzbuQKtz/hbst570ru7mVPxDH/IIfw8Cdk7JlCHa0kU=
Subject key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 78D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Mar 2026 13:05:25 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 165.173.184.0/23
IP: 199.67.71.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30937 (0x78d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 23 13:05:25 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:c9:7d:05:ba:12:d6:3e:1a:26:fc:c6:c8:
63:e6:63:9c:ed:2e:55:1d:6e:18:b1:02:38:21:1a:
42:43:5b:a4:05:c0:80:30:e4:1f:34:03:fc:ec:84:
d1:d3:52:30:e7:88:76:f7:a8:9e:cb:b5:87:9a:34:
3e:7d:c7:ae:9c:2f:0d:50:ed:92:0f:a0:da:01:f3:
8e:2b:9d:25:c7:d2:ef:82:b0:83:1c:3f:59:e8:3e:
de:30:a8:9a:7c:cb:74:4c:a7:1b:dc:ab:11:e3:18:
29:03:53:37:a2:ef:7d:c9:4a:d6:f5:95:e1:26:c3:
4d:c1:58:0a:e2:03:6e:d2:0a:e6:17:ff:73:dc:d4:
01:17:3b:3e:22:ef:57:2c:d2:3e:0f:09:d8:2a:c6:
93:14:8c:dc:b2:e7:74:b2:e6:d5:5a:b4:16:f0:32:
73:39:41:75:b3:23:4b:42:96:96:a9:bc:dc:5c:be:
20:ce:3d:4c:8d:3a:a2:e1:35:f4:c2:aa:78:fe:f4:
ea:f2:41:cb:77:c6:ef:3d:ab:d7:68:2f:3c:31:78:
99:3a:f7:ee:75:c5:24:aa:c5:ec:e0:55:28:7a:e6:
87:96:c1:61:dc:cc:51:e4:29:ab:bb:96:23:9e:f8:
47:19:32:94:8a:60:17:0d:ab:eb:56:d5:b0:17:73:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.173.184.0/23
199.67.71.0/24
Signature Algorithm: sha256WithRSAEncryption
56:df:0e:34:38:52:a6:75:57:81:2f:8a:33:18:ff:ec:b2:ff:
87:02:59:a4:53:3c:0d:c8:72:b1:69:fb:b3:7b:c3:4d:b0:fb:
f1:3f:7f:a3:46:19:db:b0:6b:b7:a3:94:a8:11:33:75:9c:80:
12:d8:a5:be:11:7c:87:d1:32:e0:1e:7a:9e:ce:22:7e:a0:90:
15:20:45:2b:92:d2:06:7e:7b:ea:30:03:38:57:45:5e:6c:36:
ed:70:b2:a6:0b:83:1e:e6:eb:bd:ee:01:99:fb:af:8e:2d:20:
b8:6b:b7:0e:da:4a:b6:cd:6a:1f:0d:56:60:d8:4f:94:d4:3f:
d6:23:1b:35:22:32:62:82:08:eb:e8:6f:32:f6:d2:8b:06:d1:
6d:44:cf:61:a3:82:42:84:ac:aa:88:af:ee:7f:06:40:9c:38:
40:11:e3:99:44:a0:42:04:4d:0a:39:56:ce:b2:a8:7e:6e:12:
95:61:6e:36:cf:7a:34:99:7f:d4:5c:24:8f:24:58:16:4b:6c:
f1:c2:07:45:f7:38:3c:66:1d:2d:18:06:fd:d5:b4:0f:a0:48:
96:e2:6e:83:2d:e8:c3:28:e8:a1:c8:b8:22:18:3c:af:ae:68:
74:d0:b3:75:b7:86:41:35:14:5a:a3:98:7f:6d:e4:f8:13:88:
69:0e:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:35:57 2026 by rpki-client