Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
File: SAzQQM6QucENq4TppH0Bd7fEO8w.cer (raw, json)
Hash identifier: 2Fbbi+BhJe89nMP1AOomsxSIchg2qUARIkbmA/gljjc=
Subject key identifier: 48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5538
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Sep 2026 22:44:44 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 80.47.64.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21816 (0x5538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 3 22:44:44 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9125AAB, serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:b3:5b:ea:21:48:bb:c5:55:77:30:65:0c:
07:f5:a8:73:60:07:27:6a:b7:5d:7b:b2:6b:4a:e1:
f6:7b:2b:1f:98:f5:1b:12:91:ed:fe:37:ae:5f:94:
29:09:77:4d:b8:13:c1:06:f0:88:cc:7c:86:0a:75:
b8:07:fb:fd:36:9b:78:07:00:6d:ae:e5:b2:85:e4:
d3:33:a6:0f:af:77:ba:e6:d1:63:d4:bc:78:47:c0:
06:eb:7a:dc:20:f0:5d:67:30:02:07:2b:9c:38:ec:
36:98:b9:bb:75:6b:65:01:3f:28:55:80:c1:27:28:
b4:e5:9b:a6:7a:11:07:d4:5a:1f:dc:86:cc:65:10:
89:a0:07:b2:bf:db:89:80:7f:07:f9:0b:69:c1:76:
cc:69:3c:53:6f:25:29:a5:78:5d:06:4d:6c:69:54:
ca:70:8f:e4:0b:eb:36:4a:b6:90:b3:f0:53:fd:43:
d7:c8:13:d1:50:9e:c8:63:85:20:61:c8:5c:67:9a:
86:a0:02:a8:ba:c0:d6:9a:11:96:40:45:b1:80:cd:
f5:29:2e:55:1a:20:58:44:df:9e:f4:0c:16:c0:55:
a5:81:98:f2:50:5a:9f:c4:fa:ec:15:b9:cf:04:68:
7a:d2:16:00:62:75:fc:d7:54:a1:a2:14:eb:69:6f:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.47.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:d5:a1:31:77:c6:92:a0:26:7c:93:00:23:9e:40:61:3c:84:
c0:af:f6:b8:7d:b0:27:b0:63:49:a2:e3:a4:78:1d:de:92:e3:
4d:a0:ce:b7:32:e6:5b:73:7b:46:fb:f4:5e:5e:0c:4b:59:f0:
a2:c8:35:45:60:bc:eb:b0:c6:bc:fd:ed:0a:a2:40:18:ce:48:
95:c1:e6:04:5c:0f:09:0d:bd:55:2e:4b:d8:77:95:83:e6:b7:
ac:8c:24:8c:7e:84:67:20:d1:ee:72:be:7d:8e:ea:d5:08:d9:
b2:71:af:4e:d4:2a:e1:8f:36:d4:7b:33:dc:1d:7e:e6:2e:ff:
b6:05:fd:98:d4:09:df:f8:9d:31:1e:6e:d1:8c:ea:3b:64:54:
0b:10:4f:52:78:5f:23:7b:f5:b4:ba:1a:a8:b9:d5:a7:21:3d:
f0:83:2d:e1:49:69:54:38:13:e0:ae:fa:4e:5c:3a:15:14:6d:
0c:d4:44:3b:ce:3f:7b:b4:2a:e2:76:ab:1a:78:5d:59:4e:b3:
c2:ce:4d:1b:38:dc:be:e4:04:20:31:3d:c4:b1:61:1c:74:38:
68:75:f3:32:89:82:d7:f9:d6:fb:1a:ff:c4:c9:0f:29:16:ec:
0e:0c:32:bf:40:cc:05:a3:6c:ee:6f:b5:62:34:e2:68:96:05:
7e:1f:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:04 2026 by rpki-client