
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/PcBRwTKrtyHhorzZB1rns05CDfg.cer
File: PcBRwTKrtyHhorzZB1rns05CDfg.cer (raw, json)
Hash identifier: PxbsoKqPo+Ut6aOXe89Yq9FCtkcr9ajPZF+8a9NyAoc=
Subject key identifier: 3D:C0:51:C1:32:AB:B7:21:E1:A2:BC:D9:07:5A:E7:B3:4E:42:0D:F8
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 554C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Sep 2026 01:13:07 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 80.43.0.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21836 (0x554c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 9 01:13:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9192C18, serialNumber=3DC051C132ABB721E1A2BCD9075AE7B34E420DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:cf:7b:c8:f9:28:fe:b7:2e:46:90:51:ce:
95:11:11:d4:25:ba:35:ab:1d:fc:da:b3:0e:29:2d:
cd:c4:6c:c3:5e:8c:87:49:c5:98:4f:3d:47:58:3b:
71:61:43:12:3f:ac:cb:02:1a:5a:bd:26:9b:8d:c7:
7f:76:d5:17:1e:c7:05:c9:ae:29:bf:12:8a:db:6b:
82:a9:94:f8:92:f8:a2:c1:d2:53:ec:01:87:cd:09:
83:fc:22:21:24:f3:43:ee:57:33:d8:1b:04:f1:ae:
05:c6:d8:5f:ee:fb:3e:48:0c:48:2f:f0:53:ba:2a:
4c:eb:83:e9:77:50:8c:4f:0f:86:6f:f0:7a:64:32:
33:bf:c9:0f:7b:c5:bf:d6:a6:e1:70:5a:8c:ce:c3:
4b:44:cb:d9:54:7d:de:a4:89:24:a1:e6:d5:35:22:
78:55:fb:4a:0f:aa:f2:b4:17:32:67:da:53:12:cc:
95:18:f3:ca:81:bd:d3:e9:fe:5f:e8:c9:9d:a8:11:
c9:4b:da:22:27:68:88:5d:20:58:ee:a1:68:d8:b5:
a8:e1:41:0b:e8:2b:04:72:8f:f7:70:5f:3c:0d:7e:
11:21:af:07:f2:2d:25:b3:7a:aa:50:b8:20:71:89:
6c:27:42:a2:c7:93:36:8d:99:6b:f2:ec:8c:fb:d9:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:51:C1:32:AB:B7:21:E1:A2:BC:D9:07:5A:E7:B3:4E:42:0D:F8
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.43.0.0/18
Signature Algorithm: sha256WithRSAEncryption
85:e3:01:5f:c2:a7:67:8b:9e:ad:9b:24:80:ed:b5:65:05:b2:
a7:05:9f:ce:8b:e3:93:37:cf:08:0d:6b:40:8c:fb:d3:27:12:
32:59:31:da:07:0f:20:be:44:50:7a:67:9d:4e:31:57:cd:1d:
c6:bb:2b:93:35:16:3f:dd:60:29:79:c9:01:11:92:ae:2c:50:
48:90:78:78:23:ad:fe:10:7f:35:52:bf:ae:6e:71:23:aa:e8:
ab:50:41:dc:bb:7e:7c:64:b1:9a:69:38:a3:4a:04:ae:7d:ea:
01:48:c7:17:51:20:c4:67:d9:b0:fe:7a:a0:9b:92:61:67:ea:
87:15:76:9e:e6:bd:31:38:a5:d7:ed:7e:af:60:7c:34:56:43:
6b:2b:78:06:a0:a3:f4:79:80:e4:c1:37:e3:82:1d:ca:b8:44:
08:e2:ef:e8:3f:59:f1:5f:ac:c7:f5:f7:64:c0:51:a3:d8:10:
50:69:6f:15:94:a8:29:4c:de:9a:c8:60:54:9d:5a:a3:46:4c:
9d:9c:ea:fa:74:4f:ba:23:fd:6e:b9:0a:da:4b:c2:1d:99:e7:
c8:ed:52:00:2f:0f:b3:10:6c:9d:a6:01:46:5d:35:83:8d:86:
0a:ea:7d:ff:f3:e3:93:3f:44:44:b6:62:80:52:6e:05:f6:1a:
cd:8c:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:16:55 2026 by rpki-client