Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
File: G5AiZjIh2M567rA_P1eZ8NV-phY.cer (raw, json)
Hash identifier: f75HDEqg2Id0bo5eAeuQSGtM77jipXCekUNp81p1pQg=
Subject key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 512F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:35 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 94.190.208.0 -- 94.190.239.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20783 (0x512f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:8f:2f:bd:1a:e6:bb:c4:57:35:ec:40:b1:
4e:6d:c5:ae:59:bb:19:0a:5b:0e:61:0f:5f:f8:b3:
99:da:ae:3a:00:4d:2d:21:60:6d:53:2f:57:79:cf:
e2:94:63:55:c5:ee:d8:9a:cb:9e:57:08:e3:e6:97:
13:2a:4f:97:ed:cd:c9:34:87:19:9c:5c:30:97:70:
59:4c:61:80:fb:64:4d:1e:d6:6b:5c:a4:d1:00:9a:
26:d7:c8:05:40:f8:0a:05:a2:18:f9:cc:76:75:e6:
87:0d:86:38:24:c6:62:e0:e9:c4:be:96:5a:41:39:
b5:62:a3:3e:3a:53:b1:53:af:2d:51:63:58:b5:1f:
ea:b4:6e:4b:92:22:11:97:62:74:ab:1e:f2:12:73:
ea:ab:11:5a:64:64:e7:78:09:4a:c4:d8:03:8b:2a:
0c:75:78:ee:98:9c:f6:0a:95:13:0e:c1:e3:66:64:
b5:65:a0:67:28:80:02:1f:58:3d:4f:cd:3a:29:c2:
79:1b:20:e0:99:3b:52:83:2f:dc:79:a0:ec:ca:d4:
4b:a3:60:fa:b9:25:7b:5a:d4:7f:5b:e6:dd:57:77:
ae:c4:b7:7b:5c:51:86:10:b7:3b:23:3b:f5:14:a1:
88:79:71:16:5a:22:6d:c8:c9:c3:b6:87:f5:59:e3:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
94.190.208.0-94.190.239.255
Signature Algorithm: sha256WithRSAEncryption
0d:5e:18:01:6e:31:a6:bd:1b:1d:98:93:38:9a:f1:56:f5:0c:
9b:66:e7:c7:31:5a:13:34:17:a5:e0:af:11:8c:97:2a:c4:0a:
24:bb:0a:54:cb:2e:3e:2b:fb:af:9d:62:de:7e:79:75:07:af:
9d:5c:a9:56:22:06:56:5a:09:f8:5b:d1:5d:bc:33:80:c1:79:
f7:ef:21:92:2f:a0:ce:ef:82:cd:a6:62:84:81:c8:40:78:8f:
60:7e:45:d5:90:98:6a:fe:26:b4:c6:4d:cf:e1:cd:29:62:21:
6c:98:19:6e:f0:a5:73:f0:fb:74:c6:9e:62:93:7b:47:64:54:
7e:d8:d9:10:c7:68:29:f8:fe:bf:80:6f:f1:0b:d1:eb:14:32:
9b:3c:59:af:d0:c0:c0:27:7e:ec:6e:32:a6:0b:be:5b:17:75:
97:5f:01:bf:1c:b9:dd:63:ea:5d:7b:90:61:d1:96:88:38:d9:
12:65:00:56:1f:6e:9e:07:10:cd:00:49:74:af:0f:07:2d:5f:
e9:71:0b:21:99:68:eb:b3:23:9d:a0:4b:19:ce:7e:84:7b:ca:
37:98:29:0f:db:e3:2a:96:9c:2d:98:63:fa:df:f9:08:89:d6:
06:e2:8d:d0:4b:57:fb:62:da:ec:28:66:a2:e7:f5:e0:cb:84:
45:45:e2:31
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgICUS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMjI3MDMwMzM1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzM0UxNjExMC8GA1UEBRMoMUI5MDIyNjYzMjIxRDhDRTdBRUVCMDNG
M0Y1Nzk5RjBENTdFQTYxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJyDjy+9Gua7xFc17ECxTm3Frlm7GQpbDmEPX/izmdquOgBNLSFgbVMvV3nP4pRj
VcXu2JrLnlcI4+aXEypPl+3NyTSHGZxcMJdwWUxhgPtkTR7Wa1yk0QCaJtfIBUD4
CgWiGPnMdnXmhw2GOCTGYuDpxL6WWkE5tWKjPjpTsVOvLVFjWLUf6rRuS5IiEZdi
dKse8hJz6qsRWmRk53gJSsTYA4sqDHV47pic9gqVEw7B42ZktWWgZyiAAh9YPU/N
OinCeRsg4Jk7UoMv3Hmg7MrUS6Ng+rkle1rUf1vm3Vd3rsS3e1xRhhC3OyM79RSh
iHlxFloibcjJw7aH9VnjldkCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQbkCJmMiHY
znrusD8/V5nw1X6mFjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzNFMTYvRjQ3QjZDRDRBQzc0MTFFQTg2RUE5RjQ4QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMzRTE2L0Y0N0I2Q0Q0QUM3NDExRUE4NkVBOUY0OEM0RjlBRTAyL0c1QWlaaklo
Mk01NjdyQV9QMWVaOE5WLXBoWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQYMBYw
FAQCAAEwDjAMAwQEXr7QAwQEXr7gMA0GCSqGSIb3DQEBCwUAA4IBAQANXhgBbjGm
vRsdmJM4mvFW9QybZufHMVoTNBel4K8RjJcqxAokuwpUyy4+K/uvnWLefnl1B6+d
XKlWIgZWWgn4W9FdvDOAwXn37yGSL6DO74LNpmKEgchAeI9gfkXVkJhq/ia0xk3P
4c0pYiFsmBlu8KVz8Pt0xp5ik3tHZFR+2NkQx2gp+P6/gG/xC9HrFDKbPFmv0MDA
J37sbjKmC75bF3WXXwG/HLndY+pde5Bh0ZaIONkSZQBWH26eBxDNAEl0rw8HLV/p
cQshmWjrsyOdoEsZzn6Ee8o3mCkP2+MqlpwtmGP63/kIidYG4o3QS1f7YtrsKGai
5/Xgy4RFReIx
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:20 2026 by rpki-client