Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.cer (raw, json)
Hash identifier: MjUn/v+RkKJGwGiyBuF2VWt+6nAAuozRqDGvRZzH/II=
Subject key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 50FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:02:26 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20732 (0x50fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:02:26 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:a1:14:86:67:43:5f:5f:0d:b1:fa:38:5b:
58:2e:49:da:72:7a:2e:65:83:31:66:6a:ed:04:80:
81:b2:f8:2a:62:e5:fe:a1:74:3f:09:73:ce:d6:03:
a2:08:52:69:f8:37:9a:8b:78:d1:b5:6f:54:04:28:
0d:a1:fe:b9:31:f5:86:df:f5:8b:b9:b4:69:58:7a:
bb:bf:b2:f6:2e:92:88:af:ac:00:2e:a3:c9:cd:e3:
64:d7:26:3c:71:11:d3:5d:4a:de:20:95:4a:c5:3d:
a1:d5:d4:0f:b0:97:fd:14:c4:8d:cf:b8:8a:65:b4:
ff:2a:b5:8b:17:b9:d6:36:56:d5:70:59:17:da:a2:
47:18:5d:8f:2c:d8:66:43:da:9f:4a:8f:8c:12:72:
e9:3e:5e:d4:6d:8b:b7:f4:ce:51:95:39:ea:5e:8d:
ac:04:9c:a2:22:34:cb:c2:3e:82:d6:1d:46:6e:29:
e7:11:3e:98:15:c9:5d:91:3b:78:cb:6a:3c:0a:7c:
5f:f2:f0:dc:61:7a:93:0e:80:9b:67:50:74:c3:fc:
c3:c6:21:be:4c:9f:0f:4d:91:43:ea:72:30:02:15:
d0:7e:b8:ae:1a:8d:b0:06:88:04:80:7e:a4:78:cc:
04:97:7e:92:86:bc:41:f0:e2:2e:04:cb:ff:91:98:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.76.0/23
Signature Algorithm: sha256WithRSAEncryption
da:10:32:ed:45:e5:4a:e4:8f:77:bf:f0:6e:49:33:df:56:d3:
a7:c4:51:5c:c0:9a:45:e8:e7:f6:42:5e:68:f7:bf:18:70:d1:
e3:fa:0d:56:06:65:e9:d4:2e:cc:c5:07:e9:22:dd:ca:4b:dd:
37:04:b3:81:37:37:3a:1e:da:cd:36:23:ca:b1:bb:4c:1c:d5:
52:1c:71:f6:70:49:b1:9c:e4:2a:72:bc:dc:40:6f:32:93:86:
0d:2a:fd:12:19:dc:09:09:51:4a:e7:e8:da:c7:12:3c:a1:73:
71:c0:20:4b:d3:76:35:b0:40:ac:0d:8f:cb:e4:47:2e:8e:0e:
31:9a:95:cb:b3:2e:cc:8f:49:28:11:4d:41:c9:79:52:a2:de:
3f:fd:05:2a:c6:ed:19:d0:ff:c7:39:d7:33:cb:47:aa:3d:46:
58:8a:68:3c:66:51:3a:10:ae:26:bc:53:23:42:68:81:03:9a:
76:c7:57:5f:7d:27:2b:76:ca:ee:f2:55:29:83:e2:9c:e8:15:
1a:ab:f4:60:0e:0e:8f:86:e1:bc:eb:e7:b3:1a:e1:17:d5:62:
f3:33:6b:3c:18:70:90:5b:13:2a:f8:aa:fe:fa:39:71:95:cc:
a9:21:23:64:d8:82:47:c3:06:1e:96:f6:31:c1:84:be:27:6d:
ef:51:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:26 2026 by rpki-client