Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer (raw, json)
Hash identifier: JOImNi4jwPeL6WkxCMTzmpgUmoU/QZ5j3q8Qmk5379Q=
Subject key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7814
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:38:04 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.202.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30740 (0x7814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 2 13:38:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:37:dc:21:d6:22:69:fa:4d:39:c3:75:0b:
56:0a:7a:ea:29:09:d8:c1:5b:78:6b:90:a4:b6:40:
f8:31:49:02:1e:ff:e3:ca:41:72:ff:73:21:89:0f:
3b:a9:df:9f:fe:dd:f4:b5:3b:b6:3b:c7:a3:1f:e3:
40:64:1f:70:a0:83:9a:18:d1:d4:d3:c4:96:9c:ce:
4e:36:32:11:b9:3a:13:af:fd:4d:3d:3d:ee:f2:98:
d5:47:57:c0:66:73:e5:84:37:61:15:13:f0:a9:5a:
06:bf:f8:81:36:5e:5c:0c:0d:25:61:ff:53:39:fe:
46:8c:42:d6:ac:26:a0:bc:e7:8a:33:1d:a5:bb:0b:
94:64:72:b1:94:da:27:f5:0d:3d:7a:e4:53:57:38:
0b:d6:10:8d:35:8b:cd:a6:f2:15:1a:49:24:19:0a:
fc:49:0e:89:71:e9:c8:5f:42:4f:4c:2d:2a:e9:71:
cd:ee:90:ad:30:c1:87:45:03:c5:d4:55:ee:66:a1:
ee:1f:f2:0b:9c:6e:d0:e0:67:c4:e7:b5:d8:66:c5:
13:5c:43:01:3b:48:17:58:76:ad:d3:d2:fa:29:9f:
0c:fa:3a:5e:fb:e0:4e:92:48:5c:67:bf:89:5d:39:
f4:40:fb:87:30:5b:76:94:d9:d1:25:38:d8:4b:54:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:cc:4b:d4:65:27:5d:a0:a3:f4:08:54:2e:0b:1e:5d:01:dd:
33:0a:8c:53:ce:7c:74:5a:66:88:3f:0c:33:e6:55:10:a4:7b:
77:64:a4:c3:2f:e9:a8:b7:c0:7f:69:60:ff:cc:88:62:85:f5:
3e:fa:95:34:0b:16:56:df:cc:21:e3:66:96:c2:14:fb:d2:0f:
3b:f9:f1:c7:7b:f3:0f:07:4f:3d:e7:72:02:eb:31:3a:98:de:
fa:72:83:27:44:97:4d:f0:03:b3:7b:28:4a:a3:9a:9c:c0:59:
82:7c:95:65:05:0e:55:7b:e1:d3:af:90:64:a8:e0:96:83:0c:
4c:d2:41:28:50:9a:07:df:c1:7b:3c:31:ce:7b:5a:7d:96:55:
d5:0c:34:e5:c1:07:15:9b:ec:cd:41:ae:09:3d:ef:84:4c:f0:
ee:6e:ba:f6:b6:fb:4d:7e:70:9a:62:6e:2f:ad:7f:d2:55:a4:
a7:0f:e8:7c:f5:ad:66:61:7b:61:90:12:33:49:e8:55:f0:af:
31:cc:0f:02:9e:23:0c:16:1a:22:c5:ee:17:f6:f7:90:62:2d:
b2:3e:da:a1:de:82:98:e7:ba:67:71:2b:27:ff:6b:8c:76:c3:
7a:05:13:cb:96:cc:fa:87:31:4d:f0:34:00:fb:56:ab:95:59:
e2:76:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 07:04:40 2026 by rpki-client