
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z4lnWEncvImucj6btvX7sBVSwpE.cer
File: Z4lnWEncvImucj6btvX7sBVSwpE.cer (raw, json)
Hash identifier: rc5d68vhS4ok9wTx6XqvdAgO/HU9kWnDezin+HeWIfk=
Subject key identifier: 67:89:67:58:49:DC:BC:89:AE:72:3E:9B:B6:F5:FB:B0:15:52:C2:91
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 82F3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 22:43:27 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 5111
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33523 (0x82f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 30 22:43:27 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A9125AAB, serialNumber=6789675849DCBC89AE723E9BB6F5FBB01552C291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:19:d8:ce:c6:b3:6a:16:21:36:77:cb:eb:
16:b0:e1:c2:06:10:fb:f4:d6:c9:17:15:0e:f7:b1:
fd:93:16:d9:15:99:d0:48:3d:68:4e:0e:5d:6e:12:
0a:2e:f4:0c:c6:ed:55:0b:f5:a3:95:85:e7:2a:57:
b8:a2:83:5b:32:41:ca:ad:e2:f5:e4:6a:f6:ca:e0:
16:b2:e6:17:3d:52:eb:a9:01:dc:8c:96:9b:98:50:
22:72:a1:d6:c7:f8:07:19:92:16:57:cd:bf:5e:b6:
a9:9e:c7:d5:80:d5:8a:27:10:9d:fa:17:f6:42:c4:
f3:81:54:37:4d:38:d6:4a:65:e9:9f:14:cf:f2:85:
83:b5:c5:56:fb:57:f9:04:60:1e:55:30:a6:b3:07:
de:2a:a0:b7:14:3e:a0:26:47:cb:a2:bb:0e:7e:ff:
ec:02:82:57:7b:33:c8:a8:98:4f:5f:3f:30:87:2f:
72:63:6b:94:28:e4:0f:ed:e0:34:0e:6c:92:d2:61:
3c:dd:30:c6:d8:8c:d9:f8:11:4b:30:63:35:9b:48:
33:24:ca:2e:e6:bc:35:75:af:63:e0:62:6f:8d:21:
08:6b:ac:0e:49:da:af:11:47:e1:82:04:35:a0:7a:
72:97:7c:fd:2c:e3:98:b6:c3:0a:82:63:2a:d7:0a:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:89:67:58:49:DC:BC:89:AE:72:3E:9B:B6:F5:FB:B0:15:52:C2:91
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5111
Signature Algorithm: sha256WithRSAEncryption
b8:3d:6b:6b:8c:6b:23:ed:ab:17:87:8e:c9:4a:46:6d:ed:cc:
cc:16:e8:ad:31:2f:d1:bb:db:81:58:0f:81:92:e6:fa:6b:68:
d9:01:bd:8c:36:59:10:2e:ae:60:c2:46:eb:69:ca:37:70:98:
01:4a:da:66:b0:e9:16:7f:74:82:4c:60:79:dd:67:4e:af:93:
9c:f9:8b:fe:0a:aa:19:bb:35:26:42:67:24:8e:6d:dc:a3:3f:
52:b0:fe:b5:60:42:25:a0:6e:2e:88:89:1b:cc:65:4d:6a:34:
42:ea:1d:2c:01:dd:83:a9:14:77:b6:13:ae:79:4d:f8:4e:38:
91:29:73:c5:e2:82:33:09:93:c1:32:e6:dd:32:e9:85:1c:ce:
0a:71:73:8e:9a:10:ee:18:0e:0d:4d:4b:cd:08:35:bd:90:67:
a0:94:b6:22:00:50:4c:de:8d:b9:5e:87:04:27:2c:f8:f2:af:
7d:67:f5:f5:80:7b:61:88:81:20:ad:96:e2:9b:6b:66:22:d4:
50:97:44:29:a5:67:4e:33:ce:88:91:22:ae:f0:ea:1c:af:2e:
61:3d:65:30:52:4f:ce:40:7b:cf:a1:ef:eb:75:60:47:6c:ab:
c9:69:dc:17:74:37:7d:93:fa:0f:e1:8a:88:18:0a:74:57:85:
72:db:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:07 2026 by rpki-client