Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
File: _d0zZyPk_yht6VYjX0y7nlvItHs.cer (raw, json)
Hash identifier: KBXrCPBlnVcCSm3c7G1/Ep5OxJQ79tjTsiQndPJDL18=
Subject key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 52B5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Apr 2026 12:31:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.142.156.0/22
IP: 195.142.212.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21173 (0x52b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 13 12:31:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:0c:35:b6:e3:bf:ba:36:95:f5:3d:28:c4:
98:45:d3:25:1e:97:2b:99:65:d4:e2:0e:2a:fe:ff:
b2:3c:7d:f4:17:cb:eb:b0:2b:8f:45:c4:47:41:7a:
57:16:21:b2:ae:4a:af:87:73:3a:87:06:0c:17:59:
79:10:51:07:dd:a8:72:f4:94:1c:ea:fd:b3:dd:da:
2c:93:10:80:9c:d7:4e:35:a0:3b:73:0e:ae:5d:27:
30:f9:9f:de:4a:df:47:9f:86:8b:1d:fd:87:16:fa:
43:7c:5c:be:f4:e8:5c:13:52:8d:5e:fc:74:7e:70:
83:68:1a:25:c5:63:b3:64:33:ed:8d:13:30:8a:11:
6b:84:f7:01:cb:45:5a:14:a1:02:37:e7:0e:a9:53:
1b:44:37:7e:87:6b:7b:d4:10:96:7e:95:d7:4c:08:
2b:87:23:62:f8:3d:f1:ec:67:68:d7:b0:12:0f:63:
0d:b9:b0:4a:46:34:91:4a:ed:25:b8:61:ac:4c:01:
7b:df:a1:b4:1a:01:69:5e:21:41:8f:c7:73:77:11:
c8:6b:68:be:3a:06:3c:2f:8b:16:84:f9:24:67:d6:
fb:0c:2f:ad:12:a6:0e:07:e9:59:05:eb:5e:a1:31:
88:30:f7:4b:47:29:10:66:8c:88:67:e5:d7:1b:2d:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.142.156.0/22
195.142.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:24:2c:9b:0c:34:5f:67:74:37:c9:7d:af:4d:95:6a:73:6b:
94:d1:99:86:c2:cb:5c:44:f3:b2:ce:0c:4c:74:d5:75:34:8c:
d3:f7:60:15:14:5d:de:93:d0:b4:e8:80:6d:72:8b:75:f7:41:
f3:41:f3:f5:c8:4a:2f:6b:c6:69:76:9a:10:40:14:c0:43:b1:
6d:53:74:d2:3f:7b:68:54:31:26:a7:3c:d0:75:a3:21:f9:45:
6b:49:8a:1a:63:6b:b6:30:b0:3e:6a:e5:71:a8:fc:d6:9b:ac:
4d:5b:e6:05:6b:fe:bf:17:6b:da:89:ed:b6:af:bd:40:df:27:
8e:e9:10:a9:ee:06:25:a0:82:52:e3:23:99:48:67:23:42:e8:
23:39:e5:69:e4:4c:fe:d8:8b:89:1b:10:e7:e4:9e:87:b6:32:
ef:92:fd:da:e2:5b:73:ec:f4:0a:b5:a9:57:88:2d:12:ab:90:
8a:c7:ad:c3:fc:42:fd:6e:7f:a1:7a:ab:af:6b:30:6c:0d:f0:
44:42:8e:59:dd:e9:9e:89:b7:9b:e2:a2:f1:9c:40:d3:e6:4c:
75:fd:b1:20:c2:7c:de:e3:0e:d4:90:2b:2c:ae:90:48:56:d7:
66:91:e5:ac:8a:51:13:c0:6e:3b:67:37:27:c8:2c:77:1d:c5:
a5:6f:c4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:23 2026 by rpki-client