Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
File: 3eQo-rsWskLR46Gm8A_V48OKpY8.cer (raw, json)
Hash identifier: /wcmBxSG/MclfMrJ9l8gVjxNR1zbCAT8pxm4GD0DRL0=
Subject key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028FC4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Feb 2026 09:12:38 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 202.0.84.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 10:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167876 (0x28fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 17 09:12:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:ab:d0:f0:9e:40:ec:a0:97:e8:c9:05:fd:
2a:94:b6:40:91:47:c5:84:6c:73:fc:69:52:68:36:
ab:5f:56:7d:0b:88:20:e4:e1:ef:de:b0:db:a2:14:
1c:93:c7:9b:56:87:6d:d0:d0:f2:79:fc:01:28:97:
6d:46:45:b7:01:fc:58:f9:30:cf:f7:f7:d0:18:4d:
96:5f:21:2e:78:6d:c8:1b:90:2e:a5:d2:71:3b:ee:
d4:dd:0b:23:fb:04:89:d6:e1:62:94:1d:1d:12:4f:
ff:ef:8f:7b:15:5a:c9:f2:25:c7:4e:ae:9c:18:a7:
fc:26:94:c7:65:68:98:9b:ed:8c:39:a7:e8:55:a9:
68:e9:0d:3a:bf:26:15:d1:c7:c5:83:ad:22:23:f7:
b6:71:21:13:34:28:ba:92:88:b2:90:86:b1:9d:23:
49:b5:d1:37:87:e3:89:09:11:1e:de:de:a3:94:70:
58:f3:3e:cb:05:37:3d:b9:95:d4:a6:9f:0f:8b:c9:
4f:1a:a3:77:0b:8d:e0:6f:b6:97:eb:b6:be:61:85:
a6:a9:8e:8b:eb:0a:7a:ef:57:0c:c0:ca:54:65:cb:
d4:38:76:d5:fa:22:2e:e7:66:bd:ab:cc:4e:90:c2:
ef:ec:cc:d1:e7:2b:75:10:4c:d0:f2:96:9b:63:09:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.0.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cd:69:1b:3b:4a:dc:af:73:3f:7e:64:a8:26:e0:14:14:15:
44:47:81:ca:e1:1b:0a:ea:77:3a:5c:33:89:e8:b3:7a:f9:09:
77:a0:31:60:b8:6e:e5:b7:c8:5e:25:86:32:3c:43:c7:a0:fd:
e9:87:8f:d2:8e:eb:31:0d:bf:4a:0e:7c:96:c0:9a:78:3f:53:
1c:5d:f4:bc:54:12:4e:67:23:ce:71:24:6d:6d:bc:9a:75:49:
89:35:25:2b:74:ad:2a:00:70:81:90:09:af:c6:4f:ac:e9:c7:
f4:b1:81:4f:7a:d3:ef:0e:4a:ca:da:d4:2e:a4:2c:52:83:4c:
55:7d:39:c0:f7:68:eb:d2:ec:ee:2b:3d:9f:14:1c:4b:62:a7:
a9:79:6f:98:dd:88:23:37:00:fc:e8:d1:a4:5a:a3:74:28:34:
6f:ab:86:cc:8b:9c:99:70:5f:6b:65:65:3e:de:61:c7:16:e2:
40:44:81:c5:38:76:7c:fc:8a:62:0d:9c:fe:ab:97:cc:c3:da:
8d:c3:07:93:bc:4e:9b:35:cd:88:9e:cb:79:63:4a:7b:5b:12:
7f:f0:27:51:28:0d:e2:3b:ca:e6:6a:a0:ae:3d:5d:cd:dc:6b:
dc:a7:cb:37:60:dd:1d:5a:db:5b:c2:16:09:19:42:59:43:dc:
aa:a9:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:28:56 2026 by rpki-client