Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
File: _zNBly3YofaHHt6Gmjod2SUorrY.cer (raw, json)
Hash identifier: c0E7dRTSDqxTipwKxkZdvYoBC9vLVlO/tbr+TRoOHjM=
Subject key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5488
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jul 2026 13:59:24 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 46.250.160.0/19
IP: 62.245.0.0/19
IP: 80.238.128.0/17
IP: 83.101.0.0/17
IP: 87.119.0.0/18
IP: 89.150.192.0/18
IP: 94.45.160.0/19
IP: 94.74.64.0/18
IP: 94.244.128.0/18
IP: 176.52.128.0/19
IP: 188.119.192.0/18
IP: 188.239.0.0/18
IP: 212.34.192.0/19
IP: 213.250.128.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21640 (0x5488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 29 13:59:24 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:19:c1:b3:f4:d2:c2:a3:be:76:a9:ec:f4:
28:81:bf:ea:bf:f1:74:92:44:3d:79:5a:ee:83:48:
03:c9:e6:9c:6d:f1:47:03:6d:ef:1c:56:c6:53:e8:
5f:fd:b5:de:ce:9b:1a:00:f5:3f:f1:16:87:45:89:
c0:31:ee:78:43:49:62:6f:93:77:24:c4:c0:8d:f4:
4d:50:cb:d4:ee:b7:d6:b7:7c:e3:4c:39:f3:a6:71:
5d:76:25:e9:36:29:85:a0:b7:05:8a:f6:2f:f5:14:
44:ff:80:2e:16:6b:ee:17:89:52:63:ee:2c:85:20:
c3:76:da:db:7c:47:b3:e1:00:9e:d3:b2:52:de:39:
e3:50:c4:87:9c:03:10:5a:73:2e:c4:74:a4:7b:ff:
af:cc:c3:e1:7d:fc:50:a2:7b:7d:95:65:7e:57:5b:
12:1f:e2:2a:78:50:fd:a3:92:1b:8f:de:e0:6c:3d:
f3:47:96:81:b6:68:79:8f:07:1d:49:49:d5:71:4d:
7d:5c:a0:0b:3b:56:72:c3:30:26:76:b2:30:5a:f6:
bc:41:09:fc:c2:6c:00:eb:30:8e:ba:9c:a7:2d:01:
4e:8b:25:58:58:47:81:57:6e:42:57:b6:c2:d6:39:
c5:ff:18:65:4a:c1:4d:dc:33:c8:36:c3:db:5b:cb:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
46.250.160.0/19
62.245.0.0/19
80.238.128.0/17
83.101.0.0/17
87.119.0.0/18
89.150.192.0/18
94.45.160.0/19
94.74.64.0/18
94.244.128.0/18
176.52.128.0/19
188.119.192.0/18
188.239.0.0/18
212.34.192.0/19
213.250.128.0/18
Signature Algorithm: sha256WithRSAEncryption
86:42:71:55:08:7e:bf:ca:8e:00:4b:89:dd:f7:04:75:96:77:
a1:19:9d:da:1a:0c:b1:ec:dd:89:69:eb:d0:c1:f4:f4:60:8d:
19:2c:5a:01:6d:1b:c7:e0:21:9b:26:8b:d4:4e:e7:a5:ed:a6:
30:a1:02:09:c1:4c:a6:2f:18:53:a1:71:d6:0a:0f:e2:70:a4:
df:a1:57:22:30:c0:fd:99:5e:aa:8b:eb:1c:86:7a:a3:f6:9d:
87:07:28:ea:16:08:fb:9f:80:c3:e9:62:07:c9:ad:b9:33:19:
be:2a:30:98:77:06:a1:bb:b0:a3:0d:12:e1:a8:81:75:b3:36:
0e:cc:98:8f:b0:21:1c:c6:37:ea:04:f9:95:87:e8:12:44:f2:
81:ed:b3:fa:b0:2e:73:71:be:f0:90:56:1f:45:e0:86:bd:61:
5e:9e:0e:53:0d:b1:c9:b0:d1:a8:88:b1:8e:c2:e9:85:ae:8a:
c0:2b:ae:b9:43:b2:26:bf:b2:4d:c3:24:51:c8:83:be:8d:4d:
42:e4:06:84:16:2e:99:b3:ac:66:b3:9c:97:0e:dc:7c:f4:96:
1c:26:52:7c:3c:84:06:5f:88:44:2f:b4:21:ce:bb:13:80:c9:
70:c9:48:22:f4:63:69:f0:d7:d3:d0:1b:d0:2d:ad:95:38:6a:
16:67:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:44:49 2026 by rpki-client