Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
File: muOXelmM-YG98IVk3ctr8rapZBs.cer (raw, json)
Hash identifier: NU51v1H/chaBNoMtjKR1BJSpovcrPZovDUXUx9ehnIM=
Subject key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4FC9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Jan 2026 03:16:41 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.86.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20425 (0x4fc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jan 27 03:16:41 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:2d:8f:e9:81:58:76:e1:56:5c:e2:d1:b6:
d5:9d:45:f3:9a:c3:b3:d1:42:2a:91:3e:6b:d8:e8:
27:a2:bc:c9:1b:57:11:31:3d:49:2d:e1:40:f1:15:
80:bd:3f:6d:ff:69:67:79:d9:3d:19:c7:16:8c:bf:
69:db:a0:3f:8f:e2:e0:53:98:a4:1c:eb:32:e8:d7:
e7:3b:95:ed:f2:bc:14:e5:55:00:82:bb:93:0a:b2:
a9:07:c8:02:e3:28:30:36:99:dd:ba:1c:ce:99:ca:
d9:0d:5b:2d:0d:ad:07:a4:91:94:a1:2f:a1:7c:63:
cf:e1:98:c9:f7:17:2a:94:92:ff:5b:8c:05:8d:04:
8d:cf:60:a4:9f:78:b8:1e:02:1d:b9:1f:75:78:d2:
bd:11:ad:5c:41:c4:06:61:32:cf:96:f4:c6:f9:a5:
b1:3e:45:5e:de:c5:05:f2:49:3b:49:2c:20:1c:be:
eb:6f:a3:98:c5:18:76:9b:8c:41:69:44:82:82:6d:
b9:5a:1c:11:da:d2:02:04:9a:a1:89:4e:f6:35:06:
b1:74:00:7d:3a:fc:13:14:6e:a1:7e:6a:49:c2:ac:
01:43:87:a9:6d:bf:6c:d1:d1:23:53:c7:91:c1:fb:
1c:38:bd:51:13:75:79:76:9b:e5:03:a5:e1:40:38:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:0d:89:27:0a:35:4a:e6:9e:38:b3:4b:11:39:a1:57:9c:ea:
2f:9c:d8:09:f2:7b:44:bf:15:52:19:2f:4e:b5:2b:19:5b:43:
ab:ef:39:c0:ba:03:31:b8:50:60:18:40:ab:3d:9e:40:24:1c:
53:1b:11:36:6c:11:21:cd:6d:81:38:1a:5b:41:ee:72:f4:ce:
3e:f9:dc:83:f8:e0:0a:ec:af:e8:a5:a7:c0:0b:38:b5:4c:03:
66:82:32:70:97:1c:6d:45:f3:bb:73:fb:02:43:6d:11:79:d5:
96:52:c1:eb:63:22:5b:77:b0:7f:52:32:dc:34:79:f0:8e:c4:
ab:92:dd:4b:d1:cc:82:bd:b6:15:40:56:df:15:bb:56:34:69:
f5:ff:c2:00:2a:c3:35:81:e1:9b:7f:30:9d:69:24:96:72:7a:
87:44:70:ca:e4:28:dc:a6:a6:cc:ed:27:81:4c:d8:8c:af:6a:
5a:c9:af:77:5b:bb:e2:01:6d:2d:83:9c:b2:09:cb:70:3a:c6:
04:22:d7:25:c6:df:b9:7a:28:04:bb:19:65:e0:5a:53:b7:5f:
71:00:7e:fa:b0:fe:87:ef:d2:bf:fa:da:00:21:15:16:de:25:
0d:09:f9:f6:27:bd:0d:8c:84:e6:b8:0e:b4:7a:7b:52:7c:7c:
71:5c:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:28:47 2026 by rpki-client