Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
File: OwpEPFCYZClPtL5HkFNmGAPxr-E.cer (raw, json)
Hash identifier: yfdubSI4aSlH0hOR8nUuJpcnX4I2+qb4eVQu9sdMvEo=
Subject key identifier: 3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5299
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Apr 2026 07:25:19 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.118.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 15:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21145 (0x5299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 7 07:25:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91AEEAA, serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:a3:21:1a:d4:28:55:e2:a6:e9:65:01:01:
2a:94:75:a4:b4:61:91:c0:b3:c9:8d:97:21:20:8b:
77:5b:8e:2f:db:53:68:2d:83:25:f2:06:cf:03:03:
2c:18:9e:6d:5e:7b:91:e5:c0:9e:c0:0d:ab:aa:c5:
e6:2a:c7:9c:ab:2e:e0:f3:83:cc:d3:6e:c0:13:92:
d0:47:81:7a:d1:67:d4:05:47:2d:38:63:12:d9:dd:
c8:80:8e:e3:05:70:a9:67:87:89:4c:19:41:06:5d:
2a:5f:e4:53:72:cb:70:2a:85:4a:20:d6:c0:86:c3:
ca:4c:a3:90:42:48:4b:d8:ad:ca:83:42:b9:ca:f5:
a9:e8:7d:0c:2b:10:c0:e0:28:a9:13:59:2b:34:5f:
e1:08:e7:45:ff:db:e2:51:63:65:c4:fa:9a:2c:73:
e0:85:d3:23:d3:95:39:69:e6:c0:94:1d:53:e8:91:
4b:85:5c:8d:ef:6c:52:64:d7:eb:0a:48:87:c6:38:
ea:3f:e7:ae:07:0b:4a:ed:cf:ff:51:dc:ac:91:98:
40:c6:39:cb:a7:c9:cf:43:27:83:39:31:04:de:48:
03:3b:15:98:81:d6:77:d5:aa:ec:dd:de:24:71:5a:
e0:c4:a5:ec:86:96:dc:3b:61:97:9d:fe:d9:26:64:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.118.0/23
Signature Algorithm: sha256WithRSAEncryption
37:93:65:b7:bd:a6:f0:b1:71:91:9e:d9:cc:db:7d:24:7e:9d:
95:7c:8e:c7:95:95:3e:c8:06:14:e5:6a:0e:60:e2:66:7d:66:
2d:cd:f7:af:c3:02:fc:a3:12:01:59:fd:2e:ac:e3:86:96:9c:
d5:54:8a:45:89:53:ba:0a:1b:41:4f:dc:4b:50:81:de:d3:f7:
06:42:d8:d7:95:0d:74:b6:b9:ed:8d:af:da:46:01:0f:8b:af:
ba:9b:3c:73:cc:0a:57:61:56:26:2d:ef:e0:68:1f:ab:f7:ac:
7e:34:2e:96:1a:d5:87:0c:0d:e3:3b:fd:08:d2:08:f8:0b:88:
b9:17:28:33:3b:d7:a9:65:69:57:49:ea:26:b0:51:bb:de:7d:
4c:8f:21:f7:0f:f6:9a:bd:02:2b:a5:1c:9c:c5:2f:3c:a6:f7:
5c:72:80:77:a2:ff:87:07:ed:fe:c8:5d:51:e0:fd:e3:7f:02:
c9:54:c4:d9:ef:7e:75:18:79:ba:a9:f5:cc:f2:5f:97:ad:21:
7a:25:18:72:64:5f:50:42:52:c0:e2:15:a2:4b:cc:21:e3:97:
35:40:00:6b:5f:a6:85:d6:12:0a:a2:a4:70:46:37:a9:6a:b0:
a4:10:27:42:7b:5f:db:fe:66:b7:b9:67:fa:cb:37:fb:f4:d3:
c6:95:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:13:27 2026 by rpki-client