
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
File: ICB51sn-B78YYiHRqZgny_axIq4.cer (raw, json)
Hash identifier: 5QstD0DkFHaUpXhkhHW+6YN5L5Re77fqz4CuVdyb6Ho=
Subject key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C0AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Jun 2026 13:36:20 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.115.24.0/22
IP: 103.55.8.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180398 (0x2c0ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 13:36:20 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:40:a3:22:3b:27:f6:dc:8c:16:0f:07:8a:
50:3a:2e:10:ab:b8:ba:78:f5:25:3b:28:43:56:29:
da:8b:23:e3:03:16:65:e6:69:50:fa:5d:51:d7:64:
29:88:67:f5:54:84:3d:00:96:77:08:1a:e4:ae:8d:
01:ed:1e:6d:df:28:1d:f0:63:23:18:05:51:95:44:
da:a1:d8:b6:c4:4d:98:03:75:ef:74:af:f0:2a:b4:
ff:dc:bb:9c:e8:5f:40:04:f9:8d:79:b1:20:66:2b:
3c:fb:ee:00:a5:4c:52:0f:03:eb:d4:43:42:c9:99:
ea:3d:4e:9d:28:ac:77:42:83:dd:65:03:6f:23:5d:
e7:b4:46:ac:7c:ac:93:59:e6:1e:5c:d3:2c:2d:cf:
55:0d:a2:b3:ff:d7:cf:36:28:b6:b4:d0:87:84:1a:
ac:0f:1c:8b:5c:6e:5d:94:8f:05:51:4b:3b:4a:89:
e0:86:47:c5:30:18:6d:a1:8e:c4:58:d1:e8:a6:a1:
ab:1d:19:c5:13:dc:10:b2:f9:8e:5d:e6:f4:09:d1:
5f:c8:d8:7b:eb:1c:57:52:7a:bc:40:98:cf:85:42:
26:90:ed:f4:a8:7e:99:09:9f:39:bb:1f:eb:54:ee:
c3:1d:f8:d3:1d:f5:54:40:66:66:aa:aa:3a:a4:51:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.24.0/22
103.55.8.0/22
Signature Algorithm: sha256WithRSAEncryption
58:1c:b6:6d:46:cd:f9:d8:57:88:1f:2b:84:57:92:b8:88:98:
01:5c:16:d2:19:54:d7:09:e8:67:af:70:42:68:d5:18:15:e0:
0e:d0:1e:41:1b:f9:95:48:22:a5:c1:6f:ca:9e:c3:be:73:b2:
7f:9b:f8:b1:a6:7b:e3:8e:64:bd:fc:3f:8c:1f:47:86:2c:4a:
12:89:47:11:7d:00:87:55:24:1d:8d:21:e7:2a:cf:94:d8:8f:
d1:f4:0f:ba:c0:4d:c6:83:fa:e8:90:ee:e9:79:ae:f7:06:55:
f5:d5:bf:3e:e4:04:ec:65:38:a2:91:93:ca:af:1d:b9:e6:e8:
3d:18:47:00:81:93:dc:ba:7a:08:99:42:cd:37:2a:69:eb:05:
31:cc:66:7d:9b:f0:f1:67:93:59:84:8c:c7:3b:20:19:54:0d:
4a:1b:53:bb:af:7d:ff:96:95:a9:8b:62:8e:65:5c:e1:e1:02:
22:99:05:15:e1:05:f9:99:fb:22:c7:e5:c1:6c:bf:a9:eb:3b:
b3:fe:6a:15:35:4e:14:02:cb:12:7e:30:ad:c4:04:5a:38:76:
68:5e:4d:e9:22:83:66:f2:77:18:1f:6f:2c:82:e6:7a:79:17:
12:e5:be:61:b9:1a:93:4b:f7:69:73:28:08:82:0e:ad:8a:d9:
79:c7:1d:af
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDAsCuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYzMDEzMzYyMFoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFE
MUE5OTgyN0NCRjZCMTIyQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNXUCjIjsn9tyMFg8HilA6LhCruLp49SU7KENWKdqLI+MDFmXmaVD6XVHXZCmI
Z/VUhD0AlncIGuSujQHtHm3fKB3wYyMYBVGVRNqh2LbETZgDde90r/AqtP/cu5zo
X0AE+Y15sSBmKzz77gClTFIPA+vUQ0LJmeo9Tp0orHdCg91lA28jXee0Rqx8rJNZ
5h5c0ywtz1UNorP/1882KLa00IeEGqwPHItcbl2UjwVRSztKieCGR8UwGG2hjsRY
0eimoasdGcUT3BCy+Y5d5vQJ0V/I2HvrHFdSerxAmM+FQiaQ7fSofpkJnzm7H+tU
7sMd+NMd9VRAZmaqqjqkUR3LAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUICB51sn+
B78YYiHRqZgny/axIq4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc4QjJCL0JGREQyMjJFM0M0NDExRUFBRUU2RjcwQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNu
LUI3OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBAItcxgDBAJnNwgwDQYJKoZIhvcNAQELBQADggEBAFgctm1GzfnY
V4gfK4RXkriImAFcFtIZVNcJ6GevcEJo1RgV4A7QHkEb+ZVIIqXBb8qew75zsn+b
+LGme+OOZL38P4wfR4YsShKJRxF9AIdVJB2NIecqz5TYj9H0D7rATcaD+uiQ7ul5
rvcGVfXVvz7kBOxlOKKRk8qvHbnm6D0YRwCBk9y6egiZQs03KmnrBTHMZn2b8PFn
k1mEjMc7IBlUDUobU7uvff+WlamLYo5lXOHhAiKZBRXhBfmZ+yLH5cFsv6nrO7P+
ahU1ThQCyxJ+MK3EBFo4dmheTekig2bydxgfbyyC5np5FxLlvmG5GpNL92lzKAiC
Dq2K2XnHHa8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:05 2026 by rpki-client