Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
File: 0xLuUOZR-vA5aO306gARSeWV_A4.cer (raw, json)
Hash identifier: LB4DpBmsH09dFcDfFd14n2aAute72662f3iHUV1NmHI=
Subject key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5122
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:17 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.100.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20770 (0x5122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:17 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:94:a1:cb:b5:b3:a5:f2:12:d4:f0:3e:91:
f8:93:76:02:58:67:a0:60:ca:25:23:17:6d:24:f2:
71:ed:b9:d0:69:08:71:88:e7:a1:59:1e:a6:1a:28:
e5:b6:22:66:81:ad:aa:a4:8f:e3:77:6b:1b:26:d4:
33:bb:3b:d0:fd:6d:eb:b4:fb:05:a3:bb:7e:1c:99:
0e:01:7c:2c:67:b6:bd:a7:80:5b:42:31:08:2b:07:
c2:7f:e8:b2:35:63:ee:e5:bb:bf:82:7a:79:ba:f3:
61:f6:29:42:79:ed:e1:6a:f8:b2:01:87:ec:64:0b:
e3:a1:95:e9:04:46:08:33:1c:56:fa:1c:d7:ce:3a:
c3:cc:a1:1a:62:ee:0a:88:d8:e1:96:e5:1c:39:c0:
00:dd:75:d1:b9:ed:90:04:f2:ff:13:11:8b:4e:a2:
4e:7d:a3:19:5e:41:cd:11:91:53:61:b5:1f:78:b9:
0f:00:91:25:52:78:e3:47:51:31:d7:d5:87:b8:93:
3c:4f:ac:a8:99:6b:1a:30:08:dd:ef:43:09:e5:52:
35:11:b0:1e:ab:b7:be:93:98:24:c9:5c:ca:0b:70:
8e:b0:b9:3e:eb:59:8a:1a:19:3b:56:b8:99:45:cb:
43:89:a5:6e:2e:cd:29:11:c2:5b:94:79:9c:d1:51:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.100.0/23
Signature Algorithm: sha256WithRSAEncryption
31:08:1b:20:90:4b:6b:09:d0:c1:6d:6b:59:8c:e0:9f:c3:22:
cc:af:ab:99:55:9c:20:84:ff:49:60:62:87:1a:6c:ae:45:1c:
f7:e2:67:46:d5:c4:a9:eb:21:cf:d9:a6:85:6e:54:05:10:5a:
c7:00:c2:5e:f4:9e:7f:9f:c0:03:02:5d:be:17:9d:54:28:8e:
4d:8c:43:c9:14:fb:38:be:a0:2a:a2:2d:b9:59:ca:ee:7d:96:
31:09:08:f6:1b:99:db:e0:00:a1:87:45:21:b4:6d:7f:83:cb:
0a:fd:59:cf:f5:15:97:ef:00:d8:fd:93:fd:d3:71:c4:63:c7:
50:ea:bc:a9:b0:53:8e:78:04:75:2b:a6:e1:ef:11:ab:e7:25:
99:c3:d0:e2:9a:c0:1f:b9:2d:7f:5a:8d:56:e6:63:c1:69:b4:
7b:b4:15:13:0c:ea:fd:9a:b0:71:7b:75:90:6a:d9:7f:aa:08:
1d:c5:f1:e7:86:0a:7f:00:74:e7:b0:e4:7e:79:9f:05:91:62:
f9:2a:94:7f:b3:18:5d:64:9d:74:df:a7:c8:28:1e:0f:f7:d3:
1b:53:42:ec:d3:03:0c:e7:aa:13:1e:44:e4:12:af:16:17:64:
51:11:05:8a:74:28:ce:bf:e2:b1:0f:82:d3:5f:93:75:6f:58:
bb:30:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:40 2026 by rpki-client