Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer (raw, json)
Hash identifier: /j53ZUuSdDJjyMuSOqxpN0xMS5NhA1G4BjflOFydabc=
Subject key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5430
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Jul 2026 11:23:34 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.58.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21552 (0x5430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 6 11:23:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:5e:2b:47:2c:ad:52:e4:d1:7b:e3:3d:44:
d1:10:77:36:75:17:28:93:90:a6:73:47:84:61:6e:
c1:27:3a:75:0f:9c:30:71:4f:82:0f:60:62:84:9e:
98:34:4d:f4:64:0c:2f:81:c7:d6:03:21:a9:53:10:
c5:b2:b6:bd:8d:cf:02:ef:12:a4:b2:37:73:61:c9:
c2:b6:87:fb:17:3d:33:9b:71:3f:4b:87:64:e8:37:
db:dd:ab:e1:03:ca:5e:da:ab:2a:f5:e8:bd:a2:fa:
fa:e2:8d:d9:ca:f6:56:77:2c:c6:6a:14:ce:c3:d1:
fc:46:42:7e:74:27:ea:c3:e0:c7:7c:45:e6:45:ce:
4a:dd:a0:34:1a:3b:44:e0:99:1b:bc:3d:b9:92:71:
64:58:0e:93:8b:4d:11:5b:82:3d:8e:0b:69:a9:98:
cb:90:cc:ee:0d:df:42:1f:9b:5b:05:43:1b:b6:9a:
86:28:8f:b2:18:a9:8e:7e:c7:13:55:c4:28:75:78:
53:09:5c:b2:ee:d9:68:b9:7f:37:9b:6b:34:c8:9e:
57:2a:a5:ec:67:53:04:34:9f:f0:9d:b8:cc:49:fa:
4b:ef:2f:e1:ea:25:35:6a:9e:25:cf:c1:a2:65:e5:
29:68:f5:94:cb:53:da:bb:f5:60:be:ab:48:c2:1f:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.58.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:2e:36:a4:70:d2:ee:cd:8e:84:d5:64:77:2e:d6:52:5c:87:
c3:9f:c3:64:7e:b2:ca:61:79:ae:6a:5c:bb:ee:6d:20:f3:80:
5c:cf:7e:54:8c:3c:eb:10:db:f0:ad:4d:0b:59:69:7c:a6:96:
eb:fd:95:43:4f:82:d6:d7:43:56:86:74:9c:f5:fe:70:84:67:
3b:29:39:1e:a2:b4:0d:90:2f:ff:dc:da:a7:38:97:9f:37:ff:
de:e3:a5:93:60:f5:1a:3c:d7:76:d7:03:66:ab:a1:fc:36:78:
2f:01:58:6d:97:20:7b:c0:68:f9:0f:d7:81:00:07:e0:78:a2:
f1:95:6b:55:bf:08:02:32:b9:a3:3c:19:8c:87:6a:5c:50:04:
f0:82:6b:ab:33:48:d1:fe:31:a1:63:c9:58:47:13:3a:4d:b5:
3c:56:ed:cb:ce:21:b6:ed:d8:df:77:83:40:c3:6b:a1:df:6b:
6e:dd:b9:44:f6:b2:f1:e0:f3:35:67:f0:6c:08:42:78:88:bc:
a7:4b:f8:1a:93:52:c0:0f:b9:b7:d5:b3:56:48:16:06:ca:67:
39:e2:c5:49:67:ed:ca:6c:25:6b:6d:81:1d:02:3d:f4:96:f3:
94:75:eb:05:d7:f3:b2:84:ab:58:14:af:72:03:f8:0d:e6:fe:
63:d0:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:27 2026 by rpki-client