Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
File: gMgrnUJmF5jRouALzqsG8-Tho14.cer (raw, json)
Hash identifier: 8P1pivOBbt0Yw6rNVJ2w0wacCDN75HrI9thgRuk8W7I=
Subject key identifier: 80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 50D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:01:59 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.8.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20697 (0x50d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:01:59 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A915B358, serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:45:64:1b:cc:27:2b:af:b4:cf:3b:78:08:
31:37:78:f3:b4:43:04:2b:7d:b7:2e:82:61:8b:c6:
9f:90:3e:f7:ad:42:64:58:3b:5d:c3:f1:f3:30:f9:
9d:43:62:3a:cf:03:ef:2b:3f:5c:5f:45:9d:9b:dc:
2f:a6:8d:3a:30:be:ca:53:a4:f5:e5:a4:53:d5:72:
af:51:4d:a3:19:c8:58:66:ae:8e:1f:5c:b8:3a:21:
65:0e:5d:e3:8c:14:5c:13:59:92:c9:40:8d:26:5e:
f9:50:7a:52:1b:f3:ed:b5:38:c2:3b:90:de:6f:41:
59:88:27:16:55:1a:3d:da:13:47:96:98:5b:6e:e7:
b7:54:66:ea:2c:56:69:0b:70:56:64:2c:7d:84:bb:
49:4c:05:b3:c4:57:5c:73:bd:0e:20:70:60:f4:c7:
f4:d1:fb:91:5c:2f:0f:73:7b:e0:b6:73:06:31:8e:
69:79:e5:46:5e:1d:a3:51:b1:0c:1b:33:62:eb:a0:
28:69:03:80:dc:22:c7:67:29:77:66:9a:97:27:32:
3b:b6:6e:86:1c:14:3a:82:0a:16:2c:0c:90:0f:49:
74:57:df:35:b8:94:ee:90:ba:6b:cb:62:42:21:5f:
12:13:a0:f5:4b:4c:ee:be:cf:03:b3:93:74:15:4c:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.8.0/23
Signature Algorithm: sha256WithRSAEncryption
59:e1:10:cd:12:93:55:3c:e3:cb:b3:c3:39:c1:eb:fc:54:09:
55:d7:9b:0d:53:05:be:28:5c:49:f9:1c:79:74:aa:4b:54:87:
ca:ee:df:ed:23:19:f6:8c:7f:74:7a:3f:b9:89:00:2a:54:11:
75:c8:ce:85:bf:b8:c2:43:c8:67:dd:43:10:3a:18:f7:0e:9e:
dc:ac:29:58:07:55:0a:1b:9a:ce:12:7e:25:2a:33:4d:15:a2:
30:81:d8:77:13:c4:f2:37:5d:85:ec:67:7a:f6:fc:18:8f:94:
02:35:20:10:51:a5:25:b3:bd:49:6e:45:d9:f4:71:ea:8a:8a:
43:ab:75:6d:a1:6d:6c:07:61:9c:52:d1:d8:54:86:6e:70:eb:
8f:cd:8d:3d:b8:fe:8c:21:25:fa:e5:c8:45:dc:90:34:b2:c4:
e6:10:d3:50:a9:c7:c9:ed:58:aa:99:89:8b:3c:8c:23:5c:cd:
a9:01:55:7d:09:89:03:e0:f0:e3:f4:c8:19:ee:dd:d7:10:81:
de:90:13:b0:83:4d:00:60:32:19:c0:cb:39:df:ab:b2:70:fc:
53:5a:d5:f1:a2:0c:ac:73:a7:d3:0a:5a:e2:f5:5b:1c:45:8b:
b6:56:a5:32:bd:1e:fa:86:b1:17:94:41:bf:a2:91:54:3b:6a:
2e:aa:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:21 2026 by rpki-client