Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
File: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer (raw, json)
Hash identifier: GtWXeoO45sNJLHNGFBVHQB5C599+A3jrOyplYuiGWdQ=
Subject key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5189
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:12 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.34.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20873 (0x5189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:12 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:6a:30:00:7c:68:1e:41:dd:1c:fa:a2:29:
be:6c:e1:4e:bf:b3:e8:da:e5:c3:26:e2:71:85:f7:
75:67:35:e3:cd:5d:39:3f:0e:b9:e6:48:78:03:34:
27:34:4d:02:ed:a0:46:d0:d4:b6:f1:c6:dd:79:0c:
a1:70:e2:70:bb:d3:ae:c5:9e:57:9e:6e:a2:fb:96:
e1:45:ad:5e:d8:44:d4:1a:70:1b:ec:82:ec:ba:7b:
ad:e0:58:e3:3d:06:a4:29:17:ae:a9:9a:5a:6e:18:
ff:1a:62:be:d3:27:82:44:2f:91:cf:8f:1b:38:71:
07:b5:ee:e4:ce:51:75:2a:ac:b9:a0:ff:64:1a:b0:
0b:15:33:3f:81:9e:66:f8:83:a4:d3:b7:e9:79:06:
d6:41:08:64:47:7a:77:15:de:64:11:c4:03:82:9f:
e4:57:80:47:34:a9:3e:78:fb:6d:ce:5e:45:72:e0:
ef:1b:65:3a:0c:3c:45:7e:6b:d2:d3:4b:cf:04:a3:
64:a7:4e:30:84:c9:da:80:88:ea:24:eb:4a:75:ef:
23:ac:13:e2:0a:8b:9b:d5:fe:ee:be:22:7e:7e:e7:
94:2c:1f:b0:c6:e6:40:a1:1b:7b:68:9d:94:55:52:
d0:60:c9:67:8b:32:5d:b7:e4:72:ec:81:13:0c:c4:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.34.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:eb:07:a0:d8:38:35:9f:f4:b7:bf:3e:0e:d2:3b:a2:a9:7f:
14:29:77:36:20:fa:9a:18:87:12:f7:39:02:48:84:e9:60:00:
a4:12:ec:b9:3a:df:90:f2:33:7e:bd:c6:07:b6:6d:63:b5:3c:
00:a1:ae:14:03:3c:d1:65:b8:ee:d3:8d:33:54:de:ca:62:11:
69:fd:65:e6:ed:01:6a:25:71:71:e4:ac:5c:6d:9a:ef:80:4d:
c6:89:a3:c3:e4:85:53:a0:13:55:e8:82:e3:3c:ae:d5:88:53:
13:d2:cc:cc:3e:49:6a:89:ca:52:68:31:be:42:10:f1:5c:a5:
f8:16:b1:a3:f4:3a:54:9c:35:21:db:2e:cf:8c:42:5a:99:13:
49:2d:41:58:ea:46:5c:fe:3f:48:0b:46:2f:cd:23:ab:94:f2:
15:2a:44:7e:26:a0:37:d3:84:65:7d:ea:93:9a:2b:43:48:06:
06:8c:3a:58:50:01:5f:a0:d5:58:49:0f:ff:ae:01:36:51:be:
6e:be:8b:c0:31:fd:ae:0a:19:60:24:82:73:c9:e1:34:f8:2f:
bc:6d:bb:38:23:9b:bd:ce:99:a3:ee:57:de:b8:ff:35:3f:19:
4c:44:8c:ca:ea:fa:f0:be:75:ed:0f:10:6b:4b:24:13:49:51:
b7:86:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:50 2026 by rpki-client