Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
File: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (raw, json)
Hash identifier: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=
Subject key identifier: CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C9B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Aug 2026 15:31:56 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 154.8.96.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 15:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19611 (0x4c9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Aug 26 15:31:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9186214, serialNumber=CE87087D7AAEA6A06C66190ACFD133BA23512677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:6f:64:c5:6c:44:ca:52:ef:a4:a6:55:1c:
37:db:09:b7:df:3c:ed:b5:79:2f:5a:17:b9:92:62:
e3:73:ec:95:b7:7a:e2:ee:b1:ad:47:52:34:4e:9a:
69:21:72:0d:c9:4d:b1:d7:18:47:32:34:3a:6d:41:
b8:20:6a:5b:29:1b:b3:88:d2:80:9c:2a:7f:43:46:
32:49:6a:9c:60:d4:76:2a:78:cd:7d:02:eb:be:26:
91:2f:c1:f6:c8:a1:60:0c:f5:30:9f:7b:d3:65:a3:
5b:47:21:f7:8f:6b:8a:04:a8:07:01:f3:ff:49:3d:
17:2b:8d:e5:ca:f1:80:43:7a:15:17:50:b4:d8:af:
21:d0:9a:f5:de:4c:ce:d4:83:e6:9f:4f:7b:5b:9d:
cb:61:49:03:6a:0a:17:c3:2c:ad:e4:3d:7b:6b:d9:
63:ea:eb:c8:d5:cc:03:f6:4a:ec:a9:a6:b3:19:ea:
b5:0a:b9:6a:06:bc:62:13:bd:18:ae:6f:4c:d0:e0:
e3:00:b8:40:03:af:a9:a8:c5:ec:b0:29:60:2c:f7:
8f:6b:5a:af:bb:56:aa:46:a3:f6:3f:a3:7a:fd:28:
35:3a:03:36:56:5e:96:2d:0a:3d:35:38:3f:cc:2b:
9a:52:aa:17:21:b7:9e:d5:d5:83:f4:f1:ae:f0:20:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.96.0/20
Signature Algorithm: sha256WithRSAEncryption
48:82:39:74:a0:76:e9:0d:d8:5e:42:4a:9a:91:52:9a:f0:b4:
35:fb:8b:a6:48:bb:d5:79:0a:04:3c:a1:c1:f4:02:2b:f4:ea:
36:16:6b:74:36:80:84:ee:44:f9:35:b4:af:c9:d9:6b:89:fc:
71:47:ac:ba:84:b5:cf:34:6f:91:2a:7b:8a:e5:31:fe:61:24:
86:11:85:68:47:db:4c:aa:44:ab:55:f6:e0:fc:f7:9a:df:6e:
95:a5:3a:19:7b:55:16:fe:d6:91:fd:9a:9f:94:b7:09:f5:9a:
00:b7:7d:69:4b:1f:46:62:bc:45:c6:b3:eb:06:08:e4:2c:b2:
ec:5c:f2:53:8a:61:3e:f0:9b:8d:a5:57:26:33:85:07:85:8e:
90:d9:ed:ac:2a:3b:af:90:95:de:87:41:fc:a6:1c:ca:22:fa:
53:7d:e2:d6:be:3c:d1:3b:bc:5c:1d:9c:f6:91:a1:f1:09:59:
46:7b:1d:bc:76:69:93:24:fc:35:9e:1c:79:5b:3b:9e:2a:d0:
49:a9:88:35:c4:fe:76:bb:47:8b:76:30:5d:a2:66:a4:36:4d:
f9:55:f6:33:12:53:33:6c:56:f9:39:83:72:19:b7:73:13:83:
e8:1b:7d:d1:b9:64:84:ff:4c:6b:60:3b:41:99:25:6a:3c:a0:
3a:26:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:25:46 2026 by rpki-client