Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer (raw, json)
Hash identifier: mMNVBBMbZMaBmiUymGBFxKt5yC9x+Vn9IuBulnaN72w=
Subject key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 May 2026 04:53:52 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31600 (0x7b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 14 04:53:52 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:ad:07:66:a7:fa:e0:19:b9:c6:e7:e5:2f:
19:44:1a:8b:c7:65:ee:14:bd:b1:68:09:51:95:c4:
35:31:9a:04:b5:42:57:42:9f:2f:6d:aa:df:b4:f7:
0c:46:e3:84:54:8f:87:59:1d:14:12:7a:db:e0:e4:
79:57:a9:0e:e2:93:dd:69:55:06:e2:83:a9:4d:8c:
57:f2:0d:ba:34:b7:70:1f:81:eb:16:3e:db:54:e4:
31:21:3a:04:00:d4:4a:f1:c6:77:d3:f9:4c:ac:14:
d9:d5:f5:b1:2f:71:c7:41:9c:21:ab:c4:d8:a6:c7:
eb:86:ee:c0:85:04:96:c7:7d:33:ca:8a:7e:45:8d:
96:43:77:b8:18:71:60:a4:30:20:54:79:80:6d:1f:
5b:f4:14:05:31:55:f0:e4:68:f0:6b:d0:e8:3b:99:
45:0d:ca:2c:4b:3f:b1:a1:2f:52:3e:18:a5:79:3d:
bb:2d:d7:0a:a7:7f:85:03:93:15:bd:c3:da:fc:52:
d3:15:bd:f5:5c:ed:93:c0:53:a5:34:95:fb:a5:ca:
51:f4:74:18:04:2c:5a:27:37:8e:ce:ab:3f:f4:b1:
79:f1:8c:60:b2:15:ae:09:da:44:85:5b:9f:e0:f2:
80:d1:ee:2d:2e:47:a6:e8:a8:49:4a:ad:be:ac:68:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.128.0/23
Signature Algorithm: sha256WithRSAEncryption
10:24:23:4a:6c:25:06:28:af:a1:c0:08:ec:93:6d:3e:41:66:
08:87:38:8d:17:12:f1:44:03:81:8c:3b:95:62:57:e2:11:0d:
94:bd:f5:39:b4:9f:b9:a3:17:4f:53:2e:87:64:c3:cb:be:79:
fc:e9:15:c5:25:01:78:86:65:d2:71:3c:1f:49:e4:62:3f:1f:
da:d0:fe:da:99:a6:4b:cf:35:d8:45:ec:21:ef:c6:4d:4b:5f:
5d:85:db:9d:64:c1:0b:de:df:fe:7b:63:db:96:05:eb:dc:1a:
04:45:51:17:14:4e:99:32:36:93:e3:6b:5b:cd:df:61:59:78:
ba:51:c9:11:33:17:0f:bd:a9:52:06:ff:85:7d:5f:cd:02:55:
cf:f6:1a:08:2b:ec:be:53:cc:23:a0:e2:f3:da:70:b3:0e:3e:
74:fc:bd:8c:4b:63:61:23:90:8f:ff:c3:5c:59:eb:03:72:c4:
7d:f5:7b:76:a4:4b:94:3d:ec:14:ae:05:6d:c8:d7:3f:b7:47:
46:4a:03:3d:e3:c1:a7:d6:28:61:0d:18:2d:d8:77:2b:bc:29:
b8:a5:ef:f4:fd:27:e7:07:bd:ca:2b:c3:81:c1:27:b0:62:ce:
6a:80:6c:04:80:fb:e1:3d:d7:39:81:f5:9e:e6:29:30:17:0b:
a7:6e:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:10:47 2026 by rpki-client