Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
File: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (raw, json)
Hash identifier: dc92CXSHVcK4zCYIrrv+NPWC93p6+eAno540R7w0xUo=
Subject key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 49D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Apr 2026 14:24:46 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 177.177.112.0/20
IP: 186.242.160.0/19
IP: 186.244.160.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 14:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18903 (0x49d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Apr 24 14:24:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:49:f9:41:64:dc:a7:df:cb:23:ca:66:07:
29:a7:91:aa:3a:aa:3e:30:81:6e:b0:21:db:6f:c7:
27:71:4d:ef:b3:9d:1f:63:fd:88:11:be:da:ac:70:
b5:d2:e0:dd:f8:9f:ff:9b:bb:37:45:ab:5c:a3:0d:
fb:8b:da:23:b2:67:92:37:ae:57:42:45:ad:bf:93:
a4:fe:3f:98:c4:d4:6c:b3:60:dc:f9:21:ac:e2:fd:
c3:5a:bb:60:70:5b:50:b0:c1:36:83:73:fb:fc:7f:
1f:d3:bb:4a:b2:12:17:b9:85:3e:59:43:7b:87:4c:
b0:5a:90:ed:e4:f6:d7:39:20:e4:e1:f4:aa:b8:29:
7f:96:bd:b3:2c:8c:5c:9b:8d:5e:74:03:04:8c:f2:
db:a8:3f:20:9c:37:99:b2:c3:73:f7:2a:76:6f:dd:
47:e7:df:8e:e1:b0:11:84:0b:46:20:7a:31:51:dd:
d9:e7:47:16:14:b2:ba:b8:52:34:37:ed:fe:88:1a:
dd:b6:36:56:60:de:8b:ee:7e:6f:1c:5c:d0:8e:6a:
03:cf:6b:1d:d5:08:3b:5e:ff:d5:91:de:23:aa:c7:
b1:ab:e3:e2:69:9a:f2:f4:ce:e6:9c:78:19:08:f0:
ed:a9:6b:a0:47:45:58:aa:d4:1b:f3:7c:ce:41:e3:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
177.177.112.0/20
186.242.160.0/19
186.244.160.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:af:26:0f:1f:fc:41:49:8f:37:00:c9:3a:63:77:27:d7:93:
9a:d9:5e:35:6f:53:91:b0:6b:3e:25:40:aa:d7:02:40:e5:e0:
f2:e5:65:52:75:5a:a4:46:ec:cf:16:23:71:ed:c1:74:19:fc:
d9:08:3b:73:e3:d8:e3:7b:ee:48:55:57:29:94:1d:e0:8b:80:
70:40:d0:2e:96:f6:70:22:88:06:65:ff:98:b7:06:1e:67:fc:
c4:41:c3:43:1d:dd:d5:3e:d7:8d:bd:56:42:6a:49:6d:2c:92:
59:b2:c1:03:e5:66:b3:34:6c:09:b6:6b:23:24:ec:da:db:9e:
00:45:bd:fd:30:1e:21:43:5a:34:ef:e6:52:c3:dd:f3:e1:a4:
f1:47:9e:1c:ef:05:23:3d:22:51:da:58:6d:0d:61:1b:45:e9:
da:75:8c:ec:5d:78:cf:fd:cf:8c:83:4c:35:1e:a9:37:b1:84:
dd:6c:29:43:49:0d:a9:cd:f5:fb:f3:99:ac:f5:0f:31:a0:a3:
e2:e6:33:a2:9d:b9:54:dd:d0:8b:c7:f9:02:ae:4e:c4:95:78:
63:86:c0:d2:09:2b:e8:ee:b5:32:6b:a0:00:ec:a4:44:b2:84:
d9:01:1e:75:75:a7:e4:d9:f6:22:73:4b:e2:1f:c7:72:0a:0a:
0f:0a:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:25:56 2026 by rpki-client