Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer (raw, json)
Hash identifier: 6T2sQqtTEBDKkflBn/BHDgov/UBrl2C8auNheCwUMAQ=
Subject key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 739B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Feb 2026 13:17:34 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 157.10.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Feb 2026 00:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29595 (0x739b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 5 13:17:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:52:87:37:e9:a5:4f:17:7e:d0:5c:a9:fb:
d9:68:f7:b3:84:f8:41:52:64:e9:01:61:71:81:29:
d0:d3:c5:df:65:8c:ea:5f:53:90:6e:54:c0:0f:fd:
0f:85:83:e8:37:1e:47:07:59:ef:e1:fa:ca:b6:ee:
fb:d1:c2:a5:a3:c8:d3:b6:54:65:ad:43:f7:25:14:
79:36:69:b4:95:0f:b8:47:da:7a:3e:f1:97:4f:5b:
94:a7:1b:12:df:cc:4b:5a:61:2f:96:cb:30:ef:4c:
a0:9b:3f:b9:9a:27:41:2b:e6:0b:9b:4f:2e:f8:84:
e9:31:d8:00:f5:96:a7:be:62:24:2c:fa:d2:cb:d3:
5b:a7:ab:10:51:4b:24:8a:14:51:1a:06:de:c8:0a:
2a:9e:b0:c7:ae:c1:d3:05:19:d0:a3:1c:e3:76:10:
84:27:d0:34:9c:d3:70:8b:59:34:76:7e:b3:78:a3:
69:26:26:5e:3d:87:c2:04:dc:98:33:00:10:6a:09:
f9:f6:0d:e1:22:e1:5c:84:9b:14:61:86:cd:6b:be:
84:8b:bc:de:2b:56:ca:9c:61:c2:2f:f7:af:c4:be:
7b:84:57:13:41:3a:21:56:72:de:d2:80:67:48:bf:
2c:9e:db:9b:b9:02:5f:1d:65:ed:98:36:2b:6c:98:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.226.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:48:ea:a8:e8:bc:41:fb:1a:78:ab:f3:ac:f0:e3:5e:c3:ae:
7a:44:e1:21:21:f1:58:0b:82:50:0b:b8:dc:c2:01:a4:69:a0:
62:74:00:e1:e7:b4:5c:20:6a:28:15:93:57:a7:fb:6d:4d:cd:
0a:57:46:12:ca:8c:79:a2:74:c0:26:6f:c2:0f:b2:72:c3:e9:
a7:60:6e:a9:c7:2b:e4:95:44:ce:de:5d:4c:dc:07:62:b8:54:
46:4a:0f:35:45:2f:90:6d:7c:a6:04:25:36:9b:bd:12:0b:a7:
19:e6:4e:ae:35:b4:dd:68:c5:5a:3b:77:79:cd:84:da:56:ce:
d0:ca:04:1f:fd:10:dc:75:c5:89:d2:9e:17:59:bb:09:a9:12:
77:a4:d6:6d:a9:3b:24:f0:7f:12:3a:e9:f8:a5:5c:28:8c:52:
8e:54:a0:b7:31:1c:69:3c:0e:c2:14:5a:90:76:a8:61:ff:e7:
17:94:2a:b0:25:fe:45:d0:d8:b4:88:ac:cb:dd:a1:fc:02:05:
57:57:9a:ae:7e:2d:5a:00:77:00:c0:f2:01:1d:e8:ef:55:c4:
ae:bf:70:3f:3b:54:00:fe:6a:26:af:98:cb:e2:63:1b:1f:0a:
9a:a1:7a:82:1f:1c:18:d5:73:47:81:7b:9e:0e:c0:8c:ef:22:
91:b6:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:25 2026 by rpki-client