Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
File: EjRfEVrEtipR9SdMVMgehkY70Lo.cer (raw, json)
Hash identifier: jKVkVOyvH9mmql7qRKAedRHSKwe8VXfx528S6XGVGzc=
Subject key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 51FA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
caRepository: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 03 Mar 2026 11:16:34 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 56868
IP: 82.158.128.0/19
IP: 151.158.4.0/23
IP: 151.158.10.0/23
IP: 151.158.36.0/23
IP: 151.158.42.0/23
IP: 151.158.54.0 -- 151.158.57.255
IP: 151.158.74.0/23
IP: 151.158.82.0 -- 151.158.85.255
IP: 151.158.92.0/23
IP: 151.158.106.0/23
IP: 151.158.132.0/23
IP: 151.158.150.0/23
IP: 151.158.176.0/24
IP: 151.158.183.0/24
IP: 151.158.186.0/23
IP: 151.158.202.0 -- 151.158.205.255
IP: 151.158.234.0/24
IP: 151.158.236.0/23
IP: 151.158.239.0 -- 151.158.241.255
IP: 151.158.250.0/24
IP: 212.117.48.0/20
IP: 2001:7fa:2::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20986 (0x51fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 3 11:16:34 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:52:29:99:50:de:58:4d:5d:63:8a:fb:aa:13:
a7:1e:f1:b4:f6:4a:9c:0d:58:0d:75:c4:8d:55:7f:
ec:04:a2:52:95:61:37:62:b3:ff:c3:46:69:6d:86:
ca:9b:40:b0:07:15:9e:63:16:28:fa:00:4c:58:f3:
b9:32:8f:ae:2c:b7:64:c7:b9:45:5a:44:5d:6d:c9:
65:c0:6b:1c:6a:e5:f0:91:66:95:ec:11:30:cc:26:
01:35:b9:8f:00:28:44:ca:02:fa:d2:85:95:69:3c:
ea:f4:be:f0:a5:78:23:8c:10:51:ba:b0:47:11:f8:
ed:04:0f:41:8a:fc:81:07:4c:6b:12:02:ab:f6:7a:
2a:d3:8a:f1:4f:2f:42:fc:90:6a:5a:9c:df:f2:91:
38:a6:6f:ec:bc:64:dc:34:de:05:17:ad:d7:d8:5f:
5f:d1:d0:69:be:47:fe:da:10:96:4d:fc:cb:da:ab:
30:bd:8d:df:ea:20:d6:cb:2b:0c:ba:46:36:ff:02:
d0:56:22:64:82:50:55:07:0a:b2:73:f6:32:74:fc:
26:36:6a:a2:ae:23:65:85:0d:2c:09:86:ea:8d:53:
94:f7:c7:95:e2:80:de:a6:79:ca:72:9d:62:c5:95:
9f:e9:9c:45:17:0d:f3:62:4f:6e:e2:2c:32:f5:13:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56868
sbgp-ipAddrBlock: critical
IPv4:
82.158.128.0/19
151.158.4.0/23
151.158.10.0/23
151.158.36.0/23
151.158.42.0/23
151.158.54.0-151.158.57.255
151.158.74.0/23
151.158.82.0-151.158.85.255
151.158.92.0/23
151.158.106.0/23
151.158.132.0/23
151.158.150.0/23
151.158.176.0/24
151.158.183.0/24
151.158.186.0/23
151.158.202.0-151.158.205.255
151.158.234.0/24
151.158.236.0/23
151.158.239.0-151.158.241.255
151.158.250.0/24
212.117.48.0/20
IPv6:
2001:7fa:2::/48
Signature Algorithm: sha256WithRSAEncryption
cf:4f:31:8a:bd:16:91:31:ad:8d:8e:38:7c:e3:ba:bc:3c:7f:
28:e7:c3:25:cf:88:79:b6:f5:0b:29:e2:5c:a9:b2:c5:f4:96:
2b:56:43:df:d8:1f:57:a1:3e:d7:1c:55:1e:e6:9f:45:a1:e2:
34:f0:80:31:11:b0:1b:4c:7a:63:74:44:08:98:10:39:34:08:
bb:b4:e7:83:d8:c7:18:bd:53:1e:8f:b4:1a:a8:d2:d0:e7:14:
79:1d:50:31:50:e7:41:47:7e:0e:58:76:93:08:cd:fd:83:68:
36:de:09:8d:6b:14:20:dc:f4:a7:ae:c8:a5:f6:ef:03:0b:c1:
54:08:68:c6:b4:c0:e6:1b:d7:81:7f:98:c7:2d:71:3d:81:af:
b1:14:ff:58:db:94:de:04:48:a0:8d:9e:c4:b3:ca:e1:b1:99:
12:48:fe:7e:16:e1:d7:f2:52:4c:e8:4f:06:bb:9b:ff:9a:0f:
ac:fe:05:0d:61:8a:79:8e:cf:c9:34:3e:30:c1:23:4f:a1:3d:
cd:1e:15:7d:fb:fa:6e:91:86:84:2b:20:c3:c8:d3:e1:6c:95:
39:48:8e:81:ae:47:a2:92:db:20:fc:0f:53:de:de:50:0a:62:
d1:ce:bf:c6:0e:16:c0:1b:3a:4b:3a:78:f8:c7:f1:47:96:9b:
ca:97:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:01:13 2026 by rpki-client