Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
File: xjZVadKEkQKf5Efl8-v2jxMB1bs.cer (raw, json)
Hash identifier: 2QKVbiMerA7rPamVy1jaEerhkCr5SosGA+TbrxTzk8w=
Subject key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 506B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 14 Feb 2026 12:42:57 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.158.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20587 (0x506b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 14 12:42:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:96:ec:b7:17:9f:63:dd:8d:22:56:b8:4c:
3c:7d:d4:82:83:d3:37:ee:6a:20:ef:1c:6e:42:f2:
a3:7b:bf:83:a0:4e:30:64:2f:ec:f2:81:3f:76:8d:
b8:6e:8d:fe:2f:a5:72:33:1a:c4:2f:b1:2c:66:f1:
b8:8d:86:94:a4:a1:47:3f:f0:e2:cd:3e:aa:93:80:
83:a4:35:9b:22:9b:99:05:d4:24:73:d8:fb:0e:5a:
90:3e:19:f4:c5:e2:94:d4:bd:e2:e7:f6:70:39:ae:
ac:7e:de:55:e6:9d:85:14:d5:48:a8:be:11:f5:42:
5f:bd:29:a2:f0:37:bf:de:04:4c:5d:ed:e6:f6:2b:
70:38:27:22:1b:01:95:8e:cd:32:80:df:75:f9:a6:
8c:21:bd:4c:06:b3:85:af:2f:16:46:44:ee:91:d8:
7d:d1:73:8b:e3:f5:87:b2:9e:d8:31:5a:c9:68:4a:
71:2b:4d:82:ca:6f:d1:d0:35:d2:0a:b5:db:1b:6e:
52:c1:f5:0c:5d:5c:b6:ac:fc:cb:97:c1:92:47:94:
cd:fb:d5:fa:d0:c8:83:96:88:a5:51:6c:73:0e:e2:
78:d2:7e:e7:85:f8:2e:2a:85:d5:62:cd:a6:81:71:
d9:c9:7f:33:22:5f:ec:f0:15:22:06:7b:32:f0:16:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:bb:ab:88:42:f5:9b:db:fb:63:f5:22:7d:bb:87:f6:9d:16:
46:c3:65:37:01:4a:52:42:80:d5:d2:f6:bf:50:4b:e2:08:01:
14:11:e7:59:ce:cd:b7:23:71:eb:da:a7:f0:d7:41:77:29:ad:
2b:b9:00:b8:0c:19:e2:b1:70:bf:d4:25:49:ef:08:e2:13:24:
7a:11:38:0a:c9:a0:eb:1f:87:e4:fa:d6:2a:2b:52:c2:20:7b:
dd:68:66:d6:0b:0c:8d:e4:e1:95:26:41:71:7c:f1:d6:0f:07:
0e:54:b0:ab:8a:2d:e2:dc:bd:87:52:29:b0:59:df:7f:d9:76:
d9:6c:1a:94:f7:9e:f6:a4:37:24:5c:ce:96:ef:a0:21:a7:c0:
fa:d1:66:9e:af:1b:fa:f1:7a:15:1f:8b:9a:bd:4f:09:50:87:
fb:ee:0d:0f:b0:df:fe:44:b0:28:50:d8:37:74:3f:7b:ba:ba:
34:2f:9b:c2:5a:82:fa:e9:80:69:38:b5:40:ba:53:71:a4:37:
66:b0:7e:30:3a:10:8a:94:fc:fa:58:8f:8f:75:51:ff:44:ad:
89:7b:a2:ba:62:d9:f7:82:73:97:26:8d:92:58:7d:e0:4a:8f:
6e:01:2e:cd:13:da:0d:7e:5f:72:db:2e:c0:ef:5f:bd:80:a9:
d1:b7:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:29 2026 by rpki-client