Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer (raw, json)
Hash identifier: G8/xkc3Dz7KcFJxchtiUradfpXxw2ELuHsf3GX+bwh8=
Subject key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028C4F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Feb 2026 16:01:32 +0000
Certificate not after: Tue 02 Jun 2026 00:00:00 +0000
Subordinate resources: IP: 45.112.176.0/22
IP: 103.52.12.0/22
IP: 2400:5f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 15:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166991 (0x28c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 2 16:01:32 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:da:8b:00:c7:55:16:bc:12:30:a3:29:8b:
1c:d6:a1:62:ea:62:66:95:20:9f:1d:4d:18:5b:b1:
57:e4:fb:db:48:f0:d2:24:cb:95:f0:e2:49:35:8c:
eb:b8:79:a1:35:da:df:58:9d:94:65:b3:e2:7a:87:
c6:75:51:1b:4c:16:96:57:4c:04:f1:9f:54:eb:c8:
4a:43:f8:ef:d8:d2:5d:c6:f4:b8:df:1d:8c:2d:8f:
1b:63:00:69:ea:c4:5b:dc:a5:0f:4e:b1:1f:e8:43:
7c:ff:22:79:7a:03:01:8c:25:05:46:e4:c7:87:87:
70:46:cd:79:e7:be:1a:35:b9:c7:57:05:3c:d4:61:
92:33:b0:42:ff:8b:c0:71:0b:da:15:a0:3c:17:3c:
3f:d2:a7:4e:ed:f1:3d:29:7c:7b:c9:9d:b1:cf:5e:
b9:05:8f:be:7a:fb:54:f7:49:ba:6f:c1:01:4f:44:
d4:73:4e:d4:82:62:c5:a7:85:05:bb:49:8a:dc:ab:
4a:43:98:51:80:7f:30:54:47:ac:ad:dd:47:df:e6:
54:72:25:4c:38:d9:12:79:99:f5:85:10:72:13:23:
69:e8:65:92:ae:31:94:27:71:20:95:f2:99:35:af:
cf:63:76:2b:52:06:72:5f:ca:67:8b:6f:67:60:be:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.176.0/22
103.52.12.0/22
IPv6:
2400:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
48:f2:0c:ff:8f:86:99:4f:66:f6:76:2b:dc:86:af:14:9b:30:
6f:63:df:68:1b:bf:67:e8:07:2c:3b:89:9d:de:a7:86:af:5c:
dd:ad:17:ec:2a:be:bd:c7:ee:5b:93:10:1c:21:03:74:cf:98:
9f:6a:c1:83:ec:96:24:6c:5b:dc:f3:1f:27:99:4d:25:ad:76:
cd:24:93:86:62:be:d0:f7:1d:dd:e7:e1:f5:c6:06:7c:a1:3c:
a4:42:a3:ec:c5:5c:f4:b3:42:7e:c9:fb:93:c4:d3:e1:b4:41:
e3:6a:af:c7:84:dc:d8:71:fc:d0:17:dd:fa:c6:8d:b2:03:67:
9b:2e:bc:5c:44:f9:64:35:95:72:4d:ce:1e:e0:2c:85:97:2a:
66:f0:12:a9:97:8c:a4:86:d2:46:77:8a:46:7e:ea:2b:0b:4c:
b8:49:6f:4b:e5:6f:bd:58:b9:41:aa:b9:1c:71:0b:c9:fd:09:
2a:a6:a2:27:68:f0:39:b5:8b:70:e3:6e:2e:cc:4b:2e:82:7c:
34:55:7c:09:1d:c0:a4:fc:07:b3:fb:c7:37:b8:f0:94:6f:93:
aa:5a:b6:9c:25:37:a4:ba:4f:8c:b8:3e:f8:b9:bd:88:ea:7b:
55:28:b4:b7:b2:e4:78:29:63:98:c0:8f:c5:dc:b7:ed:4f:54:
db:c5:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:15:52 2026 by rpki-client