Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer (raw, json)
Hash identifier: PR4LNbOLenWNJnSY+rtwS2seVEXv6mvy+WqSK/n3U2o=
Subject key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8337
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 04 Oct 2026 12:54:30 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 72.57.128.0/17
IP: 74.52.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33591 (0x8337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 4 12:54:30 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:54:39:c0:9a:b7:00:a6:ea:18:30:65:43:
71:b5:a0:70:c5:38:de:88:5b:bc:ef:63:7a:1f:cb:
d4:43:39:9c:91:7b:f0:bf:a7:4b:f6:e4:88:bd:94:
9b:91:84:11:a3:d2:cd:d4:90:d8:7e:3e:2b:52:ea:
a2:7f:03:61:bc:0f:9f:56:eb:2a:4b:1e:62:72:13:
05:33:16:94:58:42:1b:21:cc:63:1e:e4:2f:d4:c2:
f3:35:d7:e6:38:cb:7e:88:22:eb:54:f2:45:b6:02:
09:5a:89:92:34:7f:a7:12:ad:56:8d:86:bf:d1:99:
b3:89:e3:3c:de:4c:0d:ed:be:6b:cb:97:f6:66:3a:
a2:23:42:41:b6:63:60:ff:66:2c:75:a2:7a:a5:b9:
7f:c2:54:dd:d4:fa:35:fa:b0:98:f8:a3:3c:9a:db:
a8:6e:98:e5:f1:5f:fd:80:40:07:89:df:ce:75:3a:
75:1f:60:a3:15:c9:0a:96:06:9d:80:5a:66:33:5d:
af:b1:b5:9f:e3:b2:73:fa:d4:e0:43:81:42:da:17:
dd:68:31:ca:ed:8d:83:71:54:f4:ac:4f:44:35:db:
95:bf:26:d0:82:ef:1d:70:f2:26:15:6d:c5:2e:df:
5f:91:df:c8:6f:94:f9:9b:cc:51:d2:f8:2c:b9:fb:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
72.57.128.0/17
74.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:5f:80:5b:aa:61:8f:2c:db:4b:f5:23:cd:6c:60:f3:97:cf:
35:23:b5:28:9c:74:0a:6a:f7:a0:1a:f3:e4:a5:8d:1c:a6:8b:
3c:78:e6:24:e1:9d:f2:73:23:ca:c8:aa:6f:84:c0:df:5b:20:
48:c1:04:61:71:6b:f2:b6:bb:1d:6d:43:10:f6:b2:fd:71:af:
e4:c5:e6:cd:c7:56:ba:46:72:ba:cc:3b:b1:a3:d8:64:c1:40:
9d:5b:92:00:2d:7a:25:8b:b5:d6:7c:74:80:17:1d:66:98:e1:
ee:51:4f:e2:e3:60:7f:4a:73:67:d1:45:70:15:d8:a8:9c:df:
31:91:ae:ae:c6:bb:7d:8d:9b:86:a0:d0:f7:b5:a5:de:fe:28:
df:b5:df:8a:55:fa:56:7e:41:83:74:80:0c:64:95:d3:8f:d1:
4a:36:95:1e:eb:c3:65:ca:59:41:1c:2c:44:32:18:5c:37:36:
b7:3f:bc:fe:0e:dc:c8:e8:59:c7:67:eb:aa:c7:bd:ae:bf:9e:
fe:02:a0:ed:7e:a5:04:14:e8:98:be:19:2d:fd:ef:0d:48:d9:
90:4e:5d:95:78:bd:49:fe:c7:25:17:1b:d8:65:3b:63:8a:18:
44:59:49:5f:03:9b:9b:b8:f0:28:23:98:8a:99:7a:e5:02:ef:
7c:3a:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:42 2026 by rpki-client