Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
File: 0ZV-xYwI81uqa_535FqXQLpHH54.cer (raw, json)
Hash identifier: SedSjIyFSlVVQdYMlcP+rVYD+p0LFxCE0d0BUIpMr4A=
Subject key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5120
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:14 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.208.192.0/20
IP: 81.23.208.0/20
IP: 81.203.0.0/16
IP: 85.131.192.0/18
IP: 87.101.96.0/20
IP: 90.149.0.0/16
IP: 92.202.0.0/15
IP: 109.236.0.0/20
IP: 151.158.220.0/22
IP: 185.164.244.0/22
IP: 193.82.64.0/19
IP: 193.114.0.0/19
IP: 193.115.32.0/19
IP: 193.115.128.0/18
IP: 193.116.0.0/18
IP: 193.117.64.0/19
IP: 194.91.0.0/16
IP: 195.181.224.0/20
IP: 212.237.152.0/21
IP: 213.18.0.0/17
IP: 217.178.0.0/16
IP: 2001:7fa:0:3::/64
IP: 2001:7fa:7::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20768 (0x5120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:14 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:98:d3:ae:75:22:44:38:67:fb:a8:2d:08:
a6:fe:7c:78:5d:43:d0:9d:7d:00:d3:2a:e8:de:1b:
1d:ad:2b:7a:e7:7a:07:6b:6f:73:cb:78:7b:cc:c7:
16:23:b6:03:65:d6:0a:c8:91:cd:54:ce:bc:28:68:
75:64:6c:50:6b:4b:1e:b7:87:7d:6b:50:cf:5b:09:
09:b1:a0:0d:41:36:b2:b1:97:30:ea:6e:cc:50:25:
f0:34:ce:c6:62:22:b4:3d:7e:d4:02:4e:93:83:a0:
29:be:1b:d9:0f:3f:51:1b:80:6d:6a:b8:68:a3:d9:
97:08:9a:d7:22:ee:e6:db:0c:39:88:01:99:96:ec:
db:fc:66:e0:b0:16:6b:18:f3:50:ba:eb:9f:b8:79:
3f:62:99:27:00:2d:53:5b:f0:e1:30:10:84:ba:48:
ce:04:ce:fe:5c:41:32:42:97:5c:d5:31:d3:05:73:
89:0b:56:bb:19:ec:2c:f1:7e:d9:60:6f:d6:c9:92:
d6:22:3c:bf:c0:0b:93:04:82:32:91:a9:d8:d2:1a:
de:96:a4:4c:c0:40:30:02:2f:3f:26:43:c6:4d:4b:
f5:2b:47:6e:65:31:65:3c:dc:27:e7:24:6f:09:49:
c7:f7:16:23:0d:bd:67:7a:a0:93:2e:7a:6d:1b:23:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.208.192.0/20
81.23.208.0/20
81.203.0.0/16
85.131.192.0/18
87.101.96.0/20
90.149.0.0/16
92.202.0.0/15
109.236.0.0/20
151.158.220.0/22
185.164.244.0/22
193.82.64.0/19
193.114.0.0/19
193.115.32.0/19
193.115.128.0/18
193.116.0.0/18
193.117.64.0/19
194.91.0.0/16
195.181.224.0/20
212.237.152.0/21
213.18.0.0/17
217.178.0.0/16
IPv6:
2001:7fa:0:3::/64
2001:7fa:7::/48
Signature Algorithm: sha256WithRSAEncryption
06:bd:6b:77:5b:46:09:5b:5d:46:d9:ae:91:ed:c7:f3:f8:66:
bf:70:9d:11:35:0a:3b:1c:68:fc:5c:c5:83:cc:f6:26:fc:fc:
6f:48:13:52:96:47:07:f9:d5:bb:62:72:45:96:35:47:40:33:
aa:2a:c5:30:6b:b7:e2:bb:96:8e:11:10:fa:05:ad:9e:9d:0d:
4d:8f:5a:41:5f:8a:c4:c7:88:3b:e3:e2:ff:bb:35:4f:77:36:
62:1d:92:90:9e:8d:71:8c:58:cf:a8:63:a9:de:13:d1:96:0e:
1a:6c:57:03:83:51:e0:c9:b7:d4:77:fa:f7:79:7f:5f:c9:1c:
40:54:3a:53:19:f2:a7:ff:96:da:0d:08:37:c8:dd:0f:dc:5e:
d6:80:fe:2d:0a:17:5b:52:24:8e:ba:8f:80:44:f3:a7:2e:58:
24:d2:2b:a6:e0:44:70:29:b3:dc:09:5a:3c:1f:46:bf:ce:33:
f6:4a:59:64:e0:ca:41:b9:54:0c:8c:17:f9:6f:57:ec:c9:51:
1a:81:e3:c7:34:7a:6c:c2:78:06:3f:0c:d1:aa:e2:29:43:e4:
dc:16:22:21:9d:54:c1:3b:02:e5:92:d5:dd:23:14:e7:b3:29:
21:a2:59:07:fe:50:12:f2:86:37:36:25:fd:9e:3f:00:e4:f4:
c9:28:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:39 2026 by rpki-client