Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
File: g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer (raw, json)
Hash identifier: nLl33AVuVDK7Io/PPCNA9Ao/+4dqSotynf6nIrDPKAo=
Subject key identifier: 83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5108
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:02:40 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.162.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20744 (0x5108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:02:40 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91AC6B1, serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:42:8c:c0:c5:a8:fc:6d:d0:d5:0e:1a:ce:
eb:be:9c:f7:72:8f:6d:ac:f0:44:f3:ea:71:52:99:
69:ef:f0:32:ce:5f:1d:4e:12:72:01:b1:da:b8:bc:
7c:85:b3:70:8d:03:c4:06:4a:e6:0c:00:21:f9:65:
bb:96:a6:3c:13:e0:98:ce:9e:e6:83:c8:bf:0b:03:
66:48:b6:2f:61:20:2f:5e:c2:54:64:60:41:db:bb:
b6:96:12:02:f4:5d:80:cd:57:cf:e6:cf:55:16:bc:
ce:3e:1d:e7:f6:32:5c:33:88:12:15:81:ad:6a:b9:
15:f6:e9:36:59:31:50:d7:49:a8:1b:8f:e1:d2:90:
ac:b3:a9:d2:dd:e3:da:7c:f3:cb:c0:3f:94:9a:b6:
75:bd:b0:3a:57:ef:c2:a6:95:c5:20:a1:3a:1d:5f:
f1:db:a0:12:c4:54:66:28:c7:65:38:ed:42:0c:3a:
86:03:be:94:9b:9c:13:94:fc:65:ba:47:78:af:4a:
b8:8d:c7:1d:d1:f5:d4:93:89:80:d9:04:73:d4:cb:
9b:89:17:d4:a4:14:79:39:c2:5d:24:5d:53:a3:08:
f8:df:94:08:0e:6c:63:4f:55:0f:91:e0:82:eb:fd:
cb:b7:1a:48:43:48:ad:f2:e2:1e:3a:02:68:e8:d9:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.162.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d6:cd:82:6e:ec:26:e4:bb:4d:dd:6a:be:76:f9:7b:2f:5d:
78:f8:72:de:87:b5:3e:2b:7a:39:0c:87:21:d2:d1:72:71:c1:
13:9a:2e:b0:5e:9a:4a:00:23:fb:0e:13:0b:2c:f5:f6:d5:4f:
45:44:c7:0a:ca:5e:56:29:e6:99:a9:b6:ec:a4:ca:dc:e9:14:
ca:b6:f6:ad:12:01:03:7b:c5:50:4c:10:5b:1d:26:67:75:fc:
2e:48:07:da:d0:41:bd:60:f4:85:d2:c2:f6:41:a1:3d:27:05:
02:ef:9d:5f:29:18:dd:78:2e:d2:88:72:e6:ef:aa:09:1c:37:
2b:47:96:27:b9:49:b1:d0:a2:3e:55:ea:20:62:e9:33:64:01:
a7:11:2b:4f:1f:f0:f6:69:15:9b:c2:fc:c2:46:24:04:bc:0e:
0d:20:92:f1:67:8a:28:db:a6:85:83:b3:0d:59:ea:54:f4:81:
34:b8:5f:70:c7:35:97:84:22:df:02:c3:6d:fb:b1:14:a9:77:
4a:a3:f1:ae:5b:14:e1:9c:52:f2:f9:39:a9:73:cd:65:43:55:
ea:24:85:b6:0d:7d:79:d7:67:7d:75:9a:83:18:82:46:2f:2b:
83:cf:24:5b:66:89:a4:a0:7a:fe:08:1e:b8:5e:e7:c9:f8:a4:
6d:2a:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:12 2026 by rpki-client