Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
File: 4mcctGrTmxwXJOxjzVOymz5IHpk.cer (raw, json)
Hash identifier: K5jSElLPxokfrjVygBQ0WssxLAUVrShsfywXrHS6kAc=
Subject key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 51F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 04:30:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.252.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20984 (0x51f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 3 04:30:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:a9:9e:ad:1a:12:3d:b7:2f:c2:e8:cc:8b:
a3:e4:e3:74:5e:cd:74:8b:24:cf:f7:4e:ae:f2:70:
59:30:4a:41:86:db:78:61:2d:fe:46:13:58:b4:2d:
8a:af:bb:02:db:6f:23:ea:6b:b8:e1:76:d1:53:46:
f1:89:8d:49:1f:22:f9:ba:0d:cf:a5:e8:9b:23:61:
f6:00:be:a8:94:7e:a3:6d:a5:11:d1:f1:cc:b2:c2:
4b:a2:7d:13:ff:b5:ac:52:cd:cd:f2:67:5f:34:d8:
d5:0c:58:dc:6a:bc:aa:6e:49:ca:86:08:78:8a:3f:
6e:2a:6c:40:81:1c:8e:0a:42:19:19:bb:50:5c:28:
b2:f8:1a:95:26:83:7e:d5:cf:64:f6:a0:e1:b7:b9:
63:7b:2e:6b:33:3d:bb:7f:57:bb:8d:eb:56:86:59:
15:9b:50:a3:b9:48:1c:db:5b:b9:43:fa:22:cf:a8:
18:dd:51:9b:bb:7c:b9:22:4f:b0:9c:4c:f8:50:30:
ab:04:a4:29:ac:85:1b:dc:84:41:b1:00:a8:25:dd:
1f:9a:fe:a3:74:6a:ff:80:9d:3e:ee:df:c7:f7:b2:
28:50:d1:eb:ad:ad:d2:90:8f:5f:9b:74:8b:6d:b9:
93:7b:34:3c:63:61:77:50:38:d9:f9:11:1f:b7:c1:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.252.0/23
Signature Algorithm: sha256WithRSAEncryption
74:cc:4e:89:ac:eb:56:65:eb:36:24:3d:21:0c:55:b2:8e:af:
c6:f4:bc:98:66:21:2f:15:4b:1d:d5:e9:45:15:46:b3:67:22:
c0:c0:88:c0:fd:e5:67:44:97:04:b7:79:7f:91:ba:ed:be:4c:
80:a3:47:d3:31:a2:69:2d:25:07:54:eb:c7:92:c9:53:2d:28:
52:a0:71:43:09:8f:05:6d:58:26:a7:ca:f0:41:36:17:b3:b0:
c2:cb:09:f9:06:3e:c7:23:89:6c:d0:33:fb:4a:7a:13:08:5c:
84:df:0f:34:08:64:8c:5a:02:47:d2:d7:f9:a8:72:27:32:30:
ce:74:58:8e:07:c9:f3:3e:17:1d:3c:f0:ba:28:9b:46:9b:4f:
8c:f6:b2:dc:5b:5a:fc:2b:39:59:db:45:21:5d:24:03:3a:f4:
1a:c9:1c:28:36:a5:f0:9b:94:18:86:89:98:a4:85:57:80:99:
11:63:64:1c:db:b4:4f:48:18:9d:7c:a6:24:67:66:33:e8:5c:
6f:15:3b:18:88:58:46:7b:84:e0:7d:ea:ae:7d:b6:b3:64:d4:
d5:1c:c3:88:2d:0b:cf:4c:c9:1e:4b:e6:9f:1a:dd:3c:3f:65:
d7:70:16:31:77:b8:7f:1d:5b:49:7b:83:0a:0d:30:79:70:51:
cb:a3:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:00:10 2026 by rpki-client