Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer (raw, json)
Hash identifier: wc80otbeZH6411PjeMOa6LN1r6qJL3fBbPvRd5q/zf0=
Subject key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7825
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 03:15:06 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.15.5.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30757 (0x7825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 3 03:15:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:50:2a:9e:7e:c5:b6:7e:8b:8a:22:db:c0:
6c:a5:57:ee:10:6b:ae:c8:9f:c7:c2:45:1e:29:77:
50:d6:48:64:7e:a3:02:2c:c0:bd:eb:f1:d7:a9:c1:
98:d4:38:68:52:58:01:18:bc:e0:e6:5c:2a:fc:75:
16:58:40:9f:c1:5e:15:b2:7a:f5:ca:1c:e8:62:6f:
11:91:60:ea:db:de:75:cd:23:38:82:42:da:2f:10:
31:e9:ca:2c:66:a7:07:e0:3e:7f:01:78:0f:6b:10:
37:92:8e:60:ec:77:a5:0e:26:94:52:9e:b8:9d:22:
e4:fb:6a:69:92:3f:bd:4e:8e:75:70:71:37:27:a3:
b7:5a:77:55:a0:b3:ab:c8:55:65:a8:7e:58:32:f0:
ba:45:c1:7d:48:49:31:75:b9:94:79:7c:22:d3:c3:
6f:fa:38:4a:c8:75:7d:f8:67:98:36:d6:e2:c5:20:
93:bc:ec:8d:03:0c:21:6b:36:16:12:e7:6f:77:36:
96:9a:02:1c:dc:3d:eb:8b:6c:5b:04:48:06:80:b0:
30:28:b9:89:55:d9:bc:ce:f7:7c:d3:b6:7a:ec:5e:
2b:5b:84:62:21:ac:7e:ba:5b:01:55:68:9f:3c:aa:
7d:0a:6a:c1:a4:74:30:51:d6:44:7f:c9:8b:05:f3:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:db:89:2f:78:2e:df:89:9d:27:b6:77:d9:eb:d1:c9:94:9d:
56:70:2a:b2:5c:9f:0c:c4:a0:48:2e:83:5d:6b:2a:53:8b:34:
cf:5c:13:1d:6f:37:e6:81:28:36:08:62:87:ed:c8:98:9b:6e:
c5:04:1d:f4:3a:4a:d7:12:8d:93:29:66:7c:bd:fe:7d:5a:c1:
2b:d2:9e:1e:97:d2:b5:0f:d5:aa:80:eb:a2:4b:09:57:c4:0f:
4b:d3:ab:a2:12:a4:c9:c7:7c:67:db:9a:9b:54:b8:e8:6c:48:
40:0c:4b:e9:2f:30:0f:dc:ab:9e:0a:a5:aa:2b:36:57:77:a9:
55:1e:eb:60:c5:19:03:4f:18:c1:d5:7d:49:02:d0:42:e3:5c:
dd:b6:4a:9c:b5:77:95:82:a7:31:c5:4a:06:3a:2d:ad:10:f2:
99:9c:42:07:b3:f0:db:b6:01:33:86:c7:3f:a8:eb:33:27:2d:
2c:81:3c:4c:a5:d8:61:5b:a6:ac:b3:a1:e6:e5:19:f3:5a:38:
c8:26:51:74:0a:9b:ae:8d:88:ed:e5:6b:60:b5:f7:16:54:20:
51:e0:3b:7f:44:38:89:ae:51:8c:ae:51:ad:c3:f4:8e:57:ab:
42:43:a7:46:0f:ac:3f:15:0e:34:0e:f2:ae:aa:11:6b:ad:38:
49:aa:cc:70
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICeCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMzAzMDMxNTA2WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2RTM0MzExMC8GA1UEBRMoMTRFNTVFQzM0MjhFM0QyQkE0REM3MUMx
NTlFNUY2MDYxRjE2M0M2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL6IUCqefsW2fouKItvAbKVX7hBrrsifx8JFHil3UNZIZH6jAizAvevx16nBmNQ4
aFJYARi84OZcKvx1FlhAn8FeFbJ69coc6GJvEZFg6tvedc0jOIJC2i8QMenKLGan
B+A+fwF4D2sQN5KOYOx3pQ4mlFKeuJ0i5PtqaZI/vU6OdXBxNyejt1p3VaCzq8hV
Zah+WDLwukXBfUhJMXW5lHl8ItPDb/o4Ssh1ffhnmDbW4sUgk7zsjQMMIWs2FhLn
b3c2lpoCHNw964tsWwRIBoCwMCi5iVXZvM73fNO2euxeK1uEYiGsfrpbAVVonzyq
fQpqwaR0MFHWRH/JiwXzIjECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQU5V7DQo49
K6TcccFZ5fYGHxY8bTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkUzNDMvM0FFNzM5QUVCOTdFMTFFRUIzQzIyOTU1QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZFMzQzLzNBRTczOUFFQjk3RTExRUVCM0MyMjk1NUM0RjlBRTAyL0ZPVmV3MEtP
UFN1azNISEJXZVgyQmg4V1BHMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJ0PBTANBgkqhkiG9w0BAQsFAAOCAQEAbtuJL3gu34mdJ7Z32evR
yZSdVnAqslyfDMSgSC6DXWsqU4s0z1wTHW835oEoNghih+3ImJtuxQQd9DpK1xKN
kylmfL3+fVrBK9KeHpfStQ/VqoDroksJV8QPS9OrohKkycd8Z9uam1S46GxIQAxL
6S8wD9yrngqlqis2V3epVR7rYMUZA08YwdV9SQLQQuNc3bZKnLV3lYKnMcVKBjot
rRDymZxCB7Pw27YBM4bHP6jrMyctLIE8TKXYYVumrLOh5uUZ81o4yCZRdAqbro2I
7eVrYLX3FlQgUeA7f0Q4ia5RjK5RrcP0jlerQkOnRg+sPxUONA7yrqoRa604SarM
cA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 07:04:40 2026 by rpki-client