Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
File: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (raw, json)
Hash identifier: a5Ir0nV7KBW/9+U4soNUFcBC7U+vUfDbNDnpTLrDiRE=
Subject key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4C3B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Oct 2026 23:27:09 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 177.4.96.0/20
IP: 177.6.32.0/20
IP: 177.177.32.0/20
IP: 177.177.112.0/20
IP: 177.203.80.0/20
IP: 177.203.160.0/20
IP: 179.198.240.0/20
IP: 179.255.80.0/20
IP: 179.255.192.0/20
IP: 186.242.160.0/19
IP: 186.244.160.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 14:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19515 (0x4c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Oct 21 23:27:09 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:49:f9:41:64:dc:a7:df:cb:23:ca:66:07:
29:a7:91:aa:3a:aa:3e:30:81:6e:b0:21:db:6f:c7:
27:71:4d:ef:b3:9d:1f:63:fd:88:11:be:da:ac:70:
b5:d2:e0:dd:f8:9f:ff:9b:bb:37:45:ab:5c:a3:0d:
fb:8b:da:23:b2:67:92:37:ae:57:42:45:ad:bf:93:
a4:fe:3f:98:c4:d4:6c:b3:60:dc:f9:21:ac:e2:fd:
c3:5a:bb:60:70:5b:50:b0:c1:36:83:73:fb:fc:7f:
1f:d3:bb:4a:b2:12:17:b9:85:3e:59:43:7b:87:4c:
b0:5a:90:ed:e4:f6:d7:39:20:e4:e1:f4:aa:b8:29:
7f:96:bd:b3:2c:8c:5c:9b:8d:5e:74:03:04:8c:f2:
db:a8:3f:20:9c:37:99:b2:c3:73:f7:2a:76:6f:dd:
47:e7:df:8e:e1:b0:11:84:0b:46:20:7a:31:51:dd:
d9:e7:47:16:14:b2:ba:b8:52:34:37:ed:fe:88:1a:
dd:b6:36:56:60:de:8b:ee:7e:6f:1c:5c:d0:8e:6a:
03:cf:6b:1d:d5:08:3b:5e:ff:d5:91:de:23:aa:c7:
b1:ab:e3:e2:69:9a:f2:f4:ce:e6:9c:78:19:08:f0:
ed:a9:6b:a0:47:45:58:aa:d4:1b:f3:7c:ce:41:e3:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
177.4.96.0/20
177.6.32.0/20
177.177.32.0/20
177.177.112.0/20
177.203.80.0/20
177.203.160.0/20
179.198.240.0/20
179.255.80.0/20
179.255.192.0/20
186.242.160.0/19
186.244.160.0/19
Signature Algorithm: sha256WithRSAEncryption
51:be:13:fe:cf:da:c9:1e:7f:c6:e6:47:70:2f:0a:94:a2:50:
f3:f6:c8:f2:6f:80:d0:76:2e:4c:8b:c4:91:6d:6f:b7:15:9a:
6f:3b:ee:1d:2f:1a:d8:4f:94:08:b2:ae:4c:1f:15:bf:c8:79:
0f:e9:3f:a7:39:5c:66:c0:a6:e9:02:f4:bf:80:83:05:de:73:
08:6d:d0:47:87:3d:3d:a1:32:0a:65:2f:03:cb:30:b0:29:d0:
78:5d:c1:f5:3b:4d:18:4c:b4:53:b9:04:57:af:09:e6:a3:6d:
5e:a6:6c:ee:e5:28:be:26:c4:6f:e9:94:47:3a:17:15:41:53:
3a:80:c7:5f:ee:95:04:db:50:3d:2c:bc:0f:41:de:4a:d0:6d:
aa:91:03:9b:21:07:5d:f3:97:f7:17:72:f5:3c:67:43:24:05:
68:a2:05:09:50:34:fd:58:33:c0:ae:de:d6:86:41:42:be:74:
5c:9a:c6:99:f0:ac:f6:68:af:f6:97:57:eb:6d:58:87:23:32:
9e:a2:0e:cc:f4:14:8e:45:2f:69:6e:0b:d7:e1:f0:78:f1:b0:
b7:11:35:40:d4:ef:88:9c:af:3f:f5:c8:a2:06:4d:7a:05:03:
d4:02:1a:e8:16:a6:68:c1:60:73:bc:af:7a:f7:01:49:6e:e7:
5d:83:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:31:33 2026 by rpki-client