Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
File: RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer (raw, json)
Hash identifier: IOlrhBAkAV7FKYVvvvPZVtviuqB7JtdRndYU7ix/Chs=
Subject key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5100
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:02:33 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.163.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20736 (0x5100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:02:33 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:74:cb:34:c8:64:1f:67:bc:6f:c1:00:e9:
13:76:be:2f:c1:ba:fc:54:fd:f9:4b:9d:3f:17:df:
ef:3e:fa:6e:34:b4:54:22:8e:5a:13:d2:a9:85:83:
ac:07:7c:95:90:96:8e:4a:34:1e:b3:93:14:ce:4c:
7c:ea:95:36:8c:75:c1:64:fe:28:12:8d:cc:0a:64:
37:d0:10:76:3c:e0:7c:dc:3f:89:74:64:78:b1:03:
b4:7c:d8:02:2b:a4:04:bc:a6:a1:32:77:9a:28:80:
b0:9d:c8:9e:6d:77:04:df:80:3e:9a:64:ae:db:c4:
41:8c:5e:4f:95:54:36:ff:11:32:0c:3b:2e:b8:98:
f5:a8:d4:94:19:53:66:fe:89:8d:d8:7b:a1:da:88:
a9:fd:eb:69:a7:a6:1e:88:c3:fd:84:0e:51:d1:97:
f8:e2:bc:49:3f:09:1f:9d:0d:d4:f3:0d:fe:c0:b6:
05:ff:00:c7:7c:9a:58:61:72:fc:7d:d1:45:86:bc:
f4:f2:70:5d:05:68:f2:0e:70:15:d5:6b:e1:1a:ef:
11:d3:49:21:6f:8a:74:34:2a:ca:ea:22:82:66:1f:
cf:ac:4a:5e:38:17:28:3a:43:e2:a6:94:78:b0:f3:
55:cf:d6:6f:1e:7b:58:ab:e9:ad:02:d4:b9:af:85:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.163.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5c:2d:c7:f4:06:36:1f:81:1e:02:a5:e2:69:a9:8e:23:8b:
49:06:d7:6d:60:fc:fa:aa:d0:8e:67:f5:0f:3f:52:1b:0e:30:
b0:f7:77:5d:34:ff:3a:af:48:e7:cc:0b:d7:33:f5:88:43:b4:
42:6e:f4:df:54:ef:47:4b:f0:bc:38:1a:41:e0:59:8a:a2:f9:
54:47:cd:d2:28:35:82:0e:f9:90:7c:7c:83:46:82:9c:af:aa:
91:5e:d1:c0:0a:a4:f0:86:60:1d:64:35:04:30:0b:40:f7:2c:
db:a4:1e:e9:b6:bd:bb:6b:fb:fc:8e:20:d9:5e:b5:19:67:d0:
bb:84:44:c5:21:36:b3:cf:df:8f:66:cd:74:36:d4:c1:94:43:
c5:dc:4f:cd:4a:d9:40:13:1e:95:2c:94:60:10:2b:1d:76:ce:
0d:94:af:92:e4:53:21:b0:79:9b:0f:3e:65:e5:d1:3b:69:42:
1b:64:3a:59:f0:1f:7a:a7:ee:da:50:0d:14:46:91:bd:34:0b:
70:bb:8c:7d:45:e4:32:7f:5b:d8:14:d4:b8:b0:ad:38:a7:d5:
8c:72:ef:b4:83:c5:bc:67:44:c2:b1:f7:54:4a:1c:7b:cb:61:
e8:66:46:44:b0:2f:ee:63:4e:fe:12:9d:b2:fb:2c:c2:da:bb:
a0:d4:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:57 2026 by rpki-client