Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
File: SDhChq65tguzQoR_K6dhL4TbQ7I.cer (raw, json)
Hash identifier: bWNih6TqAt4Kx7QNiE3l25mxWlqMFPvgoGxgwqF374s=
Subject key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5198
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:32 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.196.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20888 (0x5198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:32 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:b0:a2:8c:a1:38:89:de:20:e9:98:f6:b6:
87:1d:dc:b1:68:bb:f0:d7:5d:85:20:d7:9c:e4:46:
1e:2f:17:23:7a:85:b5:74:98:56:4f:a9:74:59:75:
1c:1a:ee:5d:7a:6a:46:56:86:21:e0:ed:6b:96:54:
d5:2b:24:0c:0c:89:73:6d:24:70:53:f6:99:0d:8f:
b4:39:92:b0:0a:06:cd:c7:36:07:db:8d:23:f8:92:
42:29:5b:41:91:42:9f:2c:21:46:1f:07:2e:34:9f:
75:2b:99:b9:63:6f:8f:5d:4b:5b:fc:f5:9d:ee:ea:
f3:0f:15:b3:b2:3f:d5:2f:d2:bc:2d:0a:25:78:3e:
fa:f9:9d:40:23:f8:cc:bd:7d:94:f7:1c:01:f5:7a:
10:3b:e3:cf:02:4e:90:17:e2:e6:1f:3a:02:ce:6c:
8d:38:27:9d:a1:40:c6:d7:41:96:bd:de:c3:ec:5d:
20:3a:52:73:94:34:19:a6:b0:53:3d:a3:a4:45:32:
9e:29:60:74:d8:01:b8:d3:51:63:d8:c1:33:c1:e5:
f1:71:52:41:00:06:58:01:00:a8:fa:2f:b9:c1:e7:
48:ba:a0:61:3b:ae:45:8b:f6:c5:c3:04:68:5b:4b:
59:eb:13:77:84:8e:ac:0d:af:96:dc:17:be:5c:6a:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.196.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:65:22:75:b7:fb:0b:46:4c:db:42:b1:72:bf:eb:c7:24:19:
83:31:a4:e7:5b:3a:95:a2:a4:3e:87:76:e4:79:0d:91:8d:f5:
c8:53:25:cf:85:22:b7:bb:60:dd:69:8c:e1:16:a9:c8:bc:d7:
e3:76:42:09:93:1c:4c:78:f4:12:21:9c:76:88:72:55:e8:fe:
68:48:a8:c9:aa:af:61:b5:1a:f7:7e:29:bc:79:40:21:37:59:
d6:1b:30:d5:d1:19:3e:51:a3:2f:f4:e6:79:dd:6e:9c:9e:7b:
c5:f6:a9:55:47:c7:c4:81:eb:a1:ee:f6:af:6d:f8:d4:0a:84:
5c:c4:9d:d6:bf:7c:db:5d:1a:c0:f7:5f:ad:be:ac:0d:56:c3:
22:51:2d:59:36:45:c2:36:b7:e4:6e:c0:73:82:15:d2:28:3b:
da:eb:33:bd:51:8b:25:56:61:74:7e:55:64:a9:90:19:b5:00:
9f:40:17:9f:37:4b:66:38:00:02:e8:a2:29:ef:fb:c5:af:a1:
26:86:07:1a:01:56:f1:13:eb:6a:dc:fa:db:ed:11:ed:a5:b2:
65:da:77:ee:a7:10:41:aa:b8:2f:02:8a:73:7a:0b:ee:eb:8a:
55:f2:01:ef:e7:8d:0d:87:04:3c:b2:ca:79:e2:23:0c:92:1c:
b3:58:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:28:10 2026 by rpki-client