Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5hNv9jcai54OTCI2tT1oHR6G5uE.cer
File: 5hNv9jcai54OTCI2tT1oHR6G5uE.cer (raw, json)
Hash identifier: JoWnrLg6tZrrCXrPgNrzLihXKgv5zu5yzIlpBR05LqQ=
Subject key identifier: E6:13:6F:F6:37:1A:8B:9E:0E:4C:22:36:B5:3D:68:1D:1E:86:E6:E1
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 54C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Aug 2026 03:32:07 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.182.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21705 (0x54c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Aug 11 03:32:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91CE017, serialNumber=E6136FF6371A8B9E0E4C2236B53D681D1E86E6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:aa:fa:4d:03:68:2f:d2:1b:39:7d:5d:52:
8f:12:5a:15:72:fd:c0:88:e8:33:53:27:ba:fc:a7:
d4:ac:0b:22:b3:72:4c:5d:c0:a5:ab:bb:6a:7d:c9:
7e:c3:b1:c2:fb:3a:5b:78:d4:5e:b1:f0:dd:ec:a0:
48:ba:88:fb:7c:d7:a2:45:9c:c4:f2:e7:49:fc:d8:
98:7b:ff:fd:8c:e4:ea:80:f2:21:b5:2c:dc:67:0b:
34:98:ec:67:e6:b8:5a:e9:0e:a2:62:66:aa:06:c9:
bb:c1:97:50:7d:a9:3f:6e:eb:5f:95:5b:33:fd:4d:
5b:05:61:65:12:bd:44:e4:99:76:aa:8c:3d:43:d0:
c5:52:9b:76:9f:5e:1c:28:f2:6a:a4:d5:8d:4d:41:
a0:28:fa:c7:c1:8d:dc:88:d2:ef:e2:e0:09:b0:4a:
8e:b1:90:30:57:23:ec:ab:3a:0f:c7:1e:14:cb:1d:
3e:79:e6:fe:66:2f:03:70:80:07:7b:05:a7:a2:ac:
fb:0a:45:c3:de:40:f2:bd:4e:cc:b0:f2:be:36:84:
bc:c1:b3:c3:9c:1d:88:66:87:e2:1f:63:19:8c:55:
ad:cc:a1:82:1f:fb:75:95:4e:8a:c3:60:71:f5:2d:
cb:c3:4d:52:3e:e9:f6:1f:7b:ed:b6:63:96:2f:4f:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:13:6F:F6:37:1A:8B:9E:0E:4C:22:36:B5:3D:68:1D:1E:86:E6:E1
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.182.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:48:88:9f:7a:33:97:96:f8:34:46:d9:46:46:60:59:c7:7c:
0d:f3:dc:47:01:a1:c7:a9:c5:09:12:c7:3a:50:95:e9:e3:ae:
51:4e:39:26:eb:e8:bf:76:8b:ba:a8:f4:c6:a1:37:88:7d:ca:
46:07:f6:7c:90:37:57:97:3e:24:0e:7f:da:4d:ce:e0:e5:80:
17:08:6c:37:1a:29:6b:ea:08:21:8d:52:9a:a0:72:af:df:a4:
2e:1c:b3:67:05:a8:ff:94:0a:7e:52:9b:11:ba:a2:33:fe:0b:
09:2e:95:89:ec:df:a7:be:6a:ff:e8:28:9f:4c:83:99:24:b4:
08:69:74:75:fb:d8:d2:84:45:e4:be:9f:27:4d:92:42:f2:04:
0d:99:6d:cb:3f:2c:12:d5:14:8b:de:43:7b:ed:ae:d1:59:6d:
09:13:51:78:1a:bf:4a:8f:51:c7:fd:67:0a:80:56:10:45:63:
e7:b3:77:46:32:f2:0c:9e:3b:1b:64:84:c0:bb:9d:90:62:7f:
1a:88:03:a4:47:63:45:be:8d:6b:e7:2e:04:da:43:fb:4a:f4:
4c:93:5d:f4:61:df:e0:67:31:e9:ec:c9:91:3f:19:a2:3e:e9:
67:d3:2e:2d:c1:83:14:3b:2b:f3:88:55:ee:3d:51:bd:c6:9f:
a3:1c:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:13 2026 by rpki-client