Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
File: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer (raw, json)
Hash identifier: wHO0GwGVf0N+a6ciRYS6gnlDLHasTbY59IYj5bCWLhk=
Subject key identifier: 47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5121
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:15 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.98.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20769 (0x5121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:15 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91BE8A9, serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:02:97:d5:17:c2:a6:2b:3d:86:d6:12:65:
bd:63:6d:40:ca:fb:35:c0:bf:a8:ad:55:cc:3d:67:
29:5a:d3:b2:43:6b:7a:ac:c2:7d:a3:45:05:9a:a8:
c8:42:ec:e9:83:4c:b9:37:d1:cf:05:c7:40:cb:22:
1e:af:d4:72:67:ae:53:8e:94:90:f5:3f:95:6f:13:
5e:33:f4:02:43:74:7c:e7:b2:50:db:0b:70:94:e1:
4d:87:a5:78:fb:d9:50:c5:b5:40:33:66:d1:7f:a3:
ed:d9:e4:6b:23:59:81:d3:2d:1f:bb:21:dd:ff:89:
c6:b4:e6:29:d7:8e:94:27:de:51:c7:5b:a4:cb:52:
42:ef:b8:7e:af:3f:8a:0c:39:86:53:28:e2:ed:d3:
35:9c:17:94:aa:9c:ae:9e:aa:7a:6d:99:8e:9e:9d:
11:4e:dd:2e:5c:d7:af:5e:b9:66:43:2b:60:b6:1f:
5f:24:b3:2f:0e:35:8a:90:94:24:a7:38:8e:be:e9:
5b:aa:ec:e3:89:b6:ce:ec:3d:d8:bf:c4:89:49:f6:
b6:7e:9f:4d:24:06:40:1a:4e:38:3d:f8:49:2a:d6:
47:57:18:a2:70:1e:f8:cc:da:40:a3:1a:ee:ef:fd:
6a:75:83:9f:4d:32:6c:bc:9f:43:dc:1c:02:2b:f5:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.98.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:7d:a4:0a:61:54:c5:e7:b1:02:34:43:96:cc:16:77:d0:6b:
bb:96:51:e2:da:78:62:60:ec:c1:68:01:c0:eb:1a:2d:05:d1:
f1:1d:a2:31:66:cf:92:b8:b0:58:04:bf:44:a9:28:81:0b:a5:
a9:74:41:fe:0d:47:7d:eb:2e:8c:91:c2:c7:30:da:9f:32:a3:
a7:36:eb:13:4b:14:e9:49:f6:51:9b:6e:4e:12:69:4d:5e:20:
0f:88:4d:93:0f:b8:f9:40:44:fc:ca:2e:95:7a:b3:51:ef:88:
b2:3b:59:dc:d6:49:e0:05:c4:61:b4:c3:e4:56:c8:80:18:6d:
59:10:7f:45:f4:a5:62:45:fb:0d:69:cb:a6:90:ec:c0:6d:f0:
62:2b:36:ed:63:76:aa:a7:0d:39:42:b0:36:9f:c4:8e:9e:0c:
dc:dc:46:75:dd:c1:bc:db:5a:e9:9e:63:25:a7:3c:b4:a7:21:
18:ec:60:84:f2:f7:87:6f:87:ab:27:21:e2:a9:eb:77:18:d1:
9c:8a:bd:da:a3:6d:a5:a2:5e:48:8e:50:6c:91:64:df:1b:11:
57:e0:d9:e0:87:ba:7f:ed:11:83:85:97:99:10:e7:42:f6:14:
c2:6c:59:0d:b8:80:1f:d6:fa:d3:8c:af:ce:8b:e4:a0:2a:22:
05:ad:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:00 2026 by rpki-client