Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
File: MZfydASVOdoqReLMBqpcyHTmJ28.cer (raw, json)
Hash identifier: YvWcjUWuiaOJHklpZcIEJM3RWvz2Laq9PPXXKH2m23k=
Subject key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 53C2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Jun 2026 00:07:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 85.137.16.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21442 (0x53c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 11 00:07:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:4e:03:2b:1f:67:a9:f8:5b:b7:79:91:74:
5f:2e:7c:d5:c9:8a:f7:54:96:3c:bf:e1:b3:3b:6f:
0d:b2:bf:84:04:eb:36:dc:0f:c9:08:89:31:d3:32:
6d:51:93:84:db:df:33:6a:6f:8e:40:9f:ba:1c:a4:
8f:e4:49:77:a2:ab:78:81:41:f1:d2:a4:9d:b0:2b:
c0:f4:9d:07:30:08:1c:3c:e0:6e:f9:65:28:a8:af:
e0:fa:50:e9:ed:0b:66:96:bd:c6:5c:a0:dc:db:d4:
65:1f:7e:60:31:68:84:c2:95:e4:17:d0:f2:57:39:
a6:fe:4f:b1:1a:96:00:d9:2f:3e:1f:6b:b2:b0:46:
2c:d3:ee:bd:35:78:98:1c:b3:64:9c:ae:dd:5b:0a:
5b:f0:61:93:be:73:2a:0f:90:54:ff:a1:e5:06:3b:
e1:47:74:91:5e:75:3d:1d:3f:e2:b6:44:ca:aa:d0:
7a:e9:d4:5d:0c:f5:6e:80:f9:2a:d2:04:a4:99:12:
1d:a3:ad:7c:f5:d4:ad:ce:a9:88:2e:36:d0:c0:9d:
28:c0:ce:c4:14:ef:34:a2:ec:62:6e:9a:03:1e:d7:
f5:1a:ec:5f:fb:23:ce:6c:30:a6:42:fb:a7:5f:95:
38:2d:f6:c3:a9:0c:74:7e:60:45:d2:02:5c:5e:49:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
85.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:33:89:6c:df:5c:20:18:de:dc:fa:61:37:e4:76:ea:8c:ba:
1d:eb:03:8a:dd:4b:d5:5a:22:e1:ed:74:96:67:9d:02:09:d6:
98:03:22:ad:c5:06:97:81:5f:e1:4e:63:2a:d1:f3:7e:69:66:
4f:d0:aa:c3:cb:20:e6:b1:67:5e:5d:a1:c8:35:fe:d4:55:2d:
76:1c:b3:4b:c8:a3:19:f4:6d:43:eb:22:43:67:88:79:60:63:
2e:bf:86:4a:e4:9d:c0:d4:66:2e:57:0f:d2:25:71:92:f6:49:
1b:5c:5a:ca:a7:70:0b:37:b6:dc:27:9a:84:6c:74:c0:4e:eb:
6a:e5:33:9d:8f:b6:ba:7c:e6:ad:f7:1d:db:36:a7:92:a0:ac:
65:a6:89:4e:67:ca:be:ed:25:61:75:de:92:67:66:92:c8:70:
d2:be:69:53:47:41:dc:65:0c:13:96:ba:ec:89:5b:87:4a:f6:
2a:3c:40:5b:f5:2c:1e:25:c4:fe:1f:00:da:6f:bf:d1:0f:8b:
a4:46:9a:1d:db:67:0d:f8:92:a6:d0:da:cf:ef:81:75:df:55:
6e:7e:30:74:94:c1:f6:3c:ff:90:e5:bb:03:13:2c:c0:7c:66:
f9:15:ce:bb:96:aa:60:3a:5d:72:c8:81:ab:f6:77:2a:ff:32:
a8:3a:e3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:08:43 2026 by rpki-client