Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
File: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (raw, json)
Hash identifier: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=
Subject key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4A59
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 May 2026 02:35:50 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 179.70.0.0/15
IP: 179.192.0.0/16
IP: 179.196.0.0/16
IP: 187.42.0.0 -- 187.42.191.255
IP: 191.43.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 14:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19033 (0x4a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: May 27 02:35:50 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:e1:28:c5:82:b6:8e:49:d2:85:12:20:02:
b6:3a:b8:b8:96:62:1d:b0:24:44:8f:2e:f7:ce:e9:
ef:d1:e0:d6:47:fb:ae:1c:22:7b:9a:d6:9a:54:49:
ae:af:2c:5a:fd:f8:5b:16:3c:20:ee:43:26:96:26:
6f:63:49:00:26:bf:db:f6:cd:98:da:86:d8:29:dc:
29:14:85:12:60:b3:6a:3c:4a:a0:db:99:98:95:c7:
12:28:ec:21:8b:d1:e6:1c:55:d8:90:f1:33:a2:4e:
97:d8:86:ef:3b:5a:77:40:68:d7:7e:e2:7c:50:6e:
2a:3b:00:4f:2d:d6:39:48:b2:90:a0:2f:3b:6f:46:
1d:09:dc:22:c5:11:87:d7:e8:22:13:1a:6f:f9:31:
cc:12:03:c2:82:65:43:95:56:ee:ac:22:b2:71:cc:
0d:52:74:f2:0c:c5:44:33:aa:e1:8e:04:02:8d:1a:
fc:13:e7:06:60:28:7f:62:91:28:02:a8:dd:29:b1:
d4:87:b8:c7:a0:00:9c:37:f4:ff:fc:e3:65:46:9e:
06:da:da:17:bc:6f:1f:94:aa:2e:15:e3:05:fb:dc:
4c:e6:7e:01:9b:a3:02:02:27:94:4e:09:e7:bc:6c:
94:58:36:bd:45:fa:54:17:99:b7:2f:57:6d:be:bb:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
179.70.0.0/15
179.192.0.0/16
179.196.0.0/16
187.42.0.0-187.42.191.255
191.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:4e:8f:7e:19:38:38:29:7b:f8:58:ad:ad:5e:8f:ee:b7:9b:
3d:3f:fa:ca:cb:76:87:4d:7d:8b:05:c2:b4:33:18:00:1f:bf:
5b:c6:69:b8:1b:ae:6e:3c:e5:2d:f9:37:39:a0:47:76:b5:53:
75:af:8a:6d:df:d3:38:e7:c3:4b:7f:54:31:7d:6c:61:7a:af:
1f:8e:e4:b2:7f:9e:c2:4f:3b:cf:8f:2d:a0:f0:58:25:55:c2:
d6:36:9f:3b:0d:a2:51:1f:75:fb:74:5b:a1:e3:e3:fd:33:08:
1f:e3:ce:6e:10:d5:30:7e:ea:8e:f6:aa:de:6d:ae:32:33:19:
31:5b:77:c1:56:9d:f3:2c:ef:7c:ea:6a:8b:9d:c5:2c:e6:2e:
4c:f5:af:f2:ce:96:13:2a:bd:14:8f:28:67:41:94:e1:8e:a0:
98:7a:2b:e5:47:2d:35:53:77:4c:2b:d4:f0:5e:33:ca:62:62:
66:ec:e0:b9:27:02:16:04:82:c5:2f:c8:1b:c1:b6:4b:d8:07:
6f:bd:bb:1e:b9:28:be:e4:ff:bf:d4:33:27:d9:06:23:fe:64:
49:84:e1:64:6b:d8:66:a8:41:0f:cc:ce:35:aa:bc:6b:2e:ee:
a0:95:68:4e:73:3c:f2:f1:ac:51:37:d0:a9:69:54:17:ac:79:
d7:ba:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:53:50 2026 by rpki-client