Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
File: jpwcZNAr9AP0GtScU0AD52h3NPw.cer (raw, json)
Hash identifier: oiAmjA4Y2dK3R9Sl8lx563Gtx6nu71JIZmf3va+OoRg=
Subject key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5206
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 16:40:36 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.247.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20998 (0x5206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 3 16:40:36 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:ce:3c:85:6b:95:59:c2:3f:04:3f:4f:ae:
34:d7:03:5f:26:92:7d:19:a8:55:52:53:1e:cc:7c:
04:4b:f1:b8:c4:c2:98:82:c0:64:5f:db:52:a0:c8:
42:78:8d:2b:53:6d:fe:41:9c:43:a2:32:e1:24:88:
ba:5e:eb:09:4b:f4:b8:32:66:ba:60:88:98:aa:f2:
c1:bd:de:39:9f:3c:a8:8b:82:4a:32:1d:61:43:2b:
eb:e3:4c:f6:c3:6e:ff:aa:8b:df:70:e9:50:1a:e4:
ee:52:0f:9b:5d:dc:eb:3e:2b:f1:a9:f7:7f:79:73:
44:81:6b:e9:f9:47:17:77:a7:3b:50:f6:d4:15:6b:
17:56:d3:1e:5a:3d:7b:61:88:5f:be:dc:5d:3c:e5:
1e:5d:c1:7f:43:61:e3:df:4d:3c:96:13:c7:63:3f:
35:9d:50:31:90:8c:ae:f5:82:cc:d6:c7:c4:26:73:
d8:7c:ab:fd:00:49:2d:f9:d8:bd:91:20:6c:4f:56:
d0:a3:bc:cc:d4:1e:2b:96:d8:2a:bc:af:cf:26:c5:
6c:a2:1d:eb:89:59:aa:31:07:a3:74:e5:c1:b2:13:
de:a0:27:a2:32:1a:eb:57:d8:72:b9:c4:66:87:9a:
1c:42:01:ca:ca:47:53:17:09:46:14:f0:5f:53:f0:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.247.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8a:09:95:b2:8f:e9:a5:79:d3:fc:f8:ae:b2:a1:00:4b:2c:
e4:73:af:84:3b:2c:bc:58:a3:45:c0:84:93:e1:3f:ab:e6:78:
d8:dc:7d:4e:d9:3f:28:ef:e1:4c:e8:db:e8:bb:5d:dc:6b:be:
34:56:38:6d:55:fe:04:c0:3d:d6:63:76:97:08:15:4f:e6:12:
1a:bf:65:04:90:39:ed:1d:e1:64:7f:09:80:82:c7:fa:b0:d4:
3e:9b:ae:f7:b0:27:27:c9:13:71:4e:38:13:e9:d4:c0:33:2e:
31:dc:6c:94:e3:8f:8a:ad:78:f1:68:49:bb:a7:11:64:c9:ed:
3f:4f:33:cf:c1:c6:68:6c:18:b3:c1:0a:e7:7d:8d:c8:9e:b3:
c0:a9:30:22:79:72:21:2f:8c:53:3d:48:77:98:e6:0e:95:20:
ea:01:5a:7f:98:0a:61:c5:da:03:ed:bd:ca:d2:e0:e5:53:e4:
fb:d4:09:99:f2:8e:33:19:fd:9a:1b:8c:78:ea:62:ac:df:eb:
57:1a:53:95:1d:1f:de:11:21:16:8a:82:f2:23:44:b0:4e:b8:
09:96:83:86:b7:de:0e:d8:de:92:25:5c:b1:64:71:5d:1b:78:
f4:09:c8:02:94:86:7e:9a:9f:84:b8:24:4f:df:e9:c7:23:e1:
af:a0:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:59:05 2026 by rpki-client