Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
File: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (raw, json)
Hash identifier: esFXDH7ynBztsLYpp3vRpQNNhw8U+R5jMyP12TntS0I=
Subject key identifier: EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4AE6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Apr 2026 02:58:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 154.8.124.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19174 (0x4ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Apr 14 02:58:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91A45C3, serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:ea:62:2c:f3:7a:ca:dc:6a:92:cc:8f:a9:
12:e4:f2:95:ba:e7:c9:29:39:ab:20:4d:b1:19:e6:
f6:18:b4:8b:b5:f7:cf:38:55:40:71:d1:57:54:af:
7e:74:ac:74:d0:a7:39:d5:5c:6f:b5:da:c8:6d:88:
fb:b1:96:f7:8e:55:0a:62:29:e6:d2:18:83:8b:f0:
a9:b1:e8:c7:5f:86:69:37:0a:87:94:ad:02:f7:8a:
02:2d:0f:b7:2a:08:cf:21:54:c6:4d:b0:24:8a:9c:
4a:bd:77:bd:72:51:f3:ba:29:81:78:8a:5e:27:9f:
4b:73:97:06:7c:ef:26:a8:8e:30:fb:3e:15:4e:d3:
7e:af:cb:e1:ac:e3:a3:45:56:8e:1d:07:52:5a:b5:
54:4f:3f:4e:39:3e:6d:ad:d2:be:21:9c:83:2b:7c:
da:ec:16:ba:11:4a:a2:2f:1f:1d:10:af:6f:11:18:
a9:76:68:43:66:72:29:fd:e9:6a:31:67:bd:97:09:
f8:65:a7:1f:90:25:2e:76:75:b6:6e:c5:92:05:7f:
f9:b8:b6:08:13:95:5a:18:ad:4c:18:4c:11:32:5c:
b4:17:8b:c8:df:49:86:c7:81:28:26:70:bb:23:b8:
12:df:4e:04:f3:f3:00:ac:f6:6c:15:d3:0a:80:55:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.124.0/23
Signature Algorithm: sha256WithRSAEncryption
24:bf:d2:7e:e8:52:99:3b:4d:44:f4:30:66:ea:5e:55:a9:48:
75:ad:18:d4:1d:3a:60:38:1a:41:8e:6f:33:c5:4b:11:14:88:
50:43:e3:26:17:ae:a1:25:fa:42:39:f2:2e:40:e2:2f:59:70:
22:18:73:d2:05:8a:51:09:4b:c6:f0:2a:29:fd:fd:45:87:4c:
ea:79:d9:b3:79:a3:a0:53:5e:a6:72:cc:47:b8:3c:d1:72:1a:
4b:a6:55:f4:35:53:de:59:80:f9:00:95:0f:3c:84:52:42:1c:
dd:2f:00:bc:d5:d1:27:3c:de:18:ab:96:cd:43:b9:5e:65:55:
d0:6b:d9:f0:62:21:e9:b3:2e:ad:24:44:31:64:cb:f4:67:15:
c5:cc:5d:bc:cb:86:2c:c7:e6:55:67:00:80:8c:81:29:20:d6:
40:49:07:3a:14:20:74:8d:06:f3:61:54:42:41:e1:aa:2d:e9:
a3:54:df:4c:11:81:27:08:2b:4c:5d:43:95:64:d9:a6:e9:6f:
14:a3:13:4e:5e:ad:da:fd:54:2e:c2:bc:b1:06:62:ea:c4:9c:
7a:0f:bd:a9:a6:9e:1f:7c:56:de:dc:88:4a:50:08:32:b9:f5:
0b:be:83:d7:ac:7f:6e:3f:7a:45:20:60:1f:80:4b:d4:d6:18:
50:91:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:32:52 2026 by rpki-client