Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
File: crVJ4D_3UKU5edANyx2mRLtSrKw.cer (raw, json)
Hash identifier: gxy3ZMfyzQVWqXMrLx9TnImCYGSOWboM4EgRyEX1T4c=
Subject key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 520E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Mar 2026 05:21:32 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.198.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21006 (0x520e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 5 05:21:32 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:28:eb:07:27:6a:71:93:18:42:f2:33:51:
9c:1f:c3:67:ee:e2:48:ae:25:51:57:89:41:8a:0e:
8f:18:8e:3b:ce:ad:62:11:de:a4:ef:2b:cc:4d:99:
10:5b:88:ae:58:e2:a5:eb:7b:b1:83:05:ec:1b:ef:
df:9a:ba:26:ac:97:ae:8a:b9:0a:00:bb:90:72:d6:
05:ea:fa:5a:f6:15:8d:8f:b2:c8:e9:ab:c4:81:da:
e3:89:85:3c:6a:29:68:57:11:32:93:71:ea:85:ae:
06:3d:d8:5a:d5:53:6b:33:55:5a:b7:2a:6b:f1:8b:
3c:5e:31:7a:0a:bf:2e:4e:4b:4c:e8:e8:3a:6d:81:
4e:d2:5d:3c:f9:83:5c:da:58:a9:12:5b:e1:b9:e8:
ca:db:a7:98:db:c2:ee:84:3a:bf:21:62:45:4c:87:
7b:8a:cb:cd:cf:eb:8d:b9:77:56:ac:45:39:21:da:
dc:40:2e:5a:cf:fc:86:14:d3:54:20:89:07:08:9a:
1d:f4:d0:1b:81:a3:35:d1:b4:e2:42:d6:6c:a7:3f:
5d:c7:8f:5f:f2:2b:74:65:ae:f0:df:f5:af:5b:5e:
ee:5b:04:43:a8:5d:ce:0b:0b:76:55:9d:a0:70:87:
5c:d5:93:a8:43:cb:ab:8d:f2:b0:4a:59:ad:0f:16:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.198.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:f8:0d:08:e0:e5:b0:66:89:fe:5f:2f:66:6d:42:19:2a:63:
7c:e2:9f:e4:af:0e:ed:25:da:63:93:c5:a5:5a:bf:ea:67:8f:
f1:57:d6:b7:9b:a9:05:45:b1:13:ac:21:71:0c:2e:4b:9e:ef:
d8:a1:46:c8:b0:7a:c8:69:ff:48:14:22:db:c0:5d:f3:cf:bd:
43:fa:60:00:de:0f:02:60:3a:fb:28:71:49:c3:52:1a:a3:06:
e4:01:89:73:48:c2:18:fe:a7:77:e0:84:33:ba:92:7a:6b:b6:
21:7f:4e:3d:cf:77:a8:df:21:62:21:69:57:aa:23:c9:1d:e2:
09:15:b2:26:f7:31:0a:84:f8:23:a2:1c:c3:c0:7b:14:04:d8:
1b:72:5d:96:7b:a2:8f:e0:7f:ca:e1:d1:48:0a:d7:6b:86:9f:
24:b2:2b:e5:08:7c:01:94:e3:83:bb:1a:53:d3:49:e8:6e:3e:
92:b1:25:67:92:17:42:13:36:64:1c:d3:0a:9e:d2:f2:2a:78:
e7:9b:8d:4e:28:60:ae:b6:7d:f3:f1:99:86:d3:9f:7e:0d:06:
5f:36:72:f0:74:77:a2:c7:1d:c1:ed:6a:be:e4:6f:f8:03:e7:
8b:89:3b:1c:1a:11:0a:7e:ea:93:5c:69:c4:74:5f:ee:0e:2f:
48:d6:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:00:36 2026 by rpki-client