Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
File: jedlypHSuTU2K6RMdbXBIrSmzvQ.cer (raw, json)
Hash identifier: rJq8Q4VJpZpsJNWSBg0JrP2D8m+PSPAwzUNdJw6B4Pc=
Subject key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 517F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:04:55 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.16.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20863 (0x517f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:04:55 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:ee:2a:80:1f:55:09:e0:03:75:69:b9:71:
66:e3:aa:61:26:87:77:18:16:f9:4e:5d:2b:a6:ac:
cf:a1:2b:1b:82:10:5e:31:07:13:20:82:9a:b0:4c:
60:9d:66:af:e3:02:02:8d:1d:f6:b0:a8:6d:2a:fa:
7d:de:40:3e:68:38:03:1f:55:c5:77:03:72:ef:05:
62:8d:27:1b:4d:98:df:f4:d3:6c:46:14:f6:b0:44:
78:2d:49:a8:51:93:dd:ce:a6:9e:17:46:09:9a:93:
e9:30:4a:5a:19:8c:ab:f8:32:80:11:48:dd:93:2f:
ca:5b:4b:56:5a:46:7a:7a:5b:aa:b1:18:47:2c:0e:
55:14:29:bc:aa:f5:c3:13:69:a9:bb:d2:b3:78:33:
1b:76:90:bb:47:c5:19:5c:77:c6:7d:b4:1a:98:14:
29:41:bd:25:1b:aa:da:02:2d:ed:c8:6f:c6:4a:5b:
0f:52:5d:fb:e3:b8:3a:47:c0:5b:6e:78:8f:89:90:
3a:c4:09:7c:2e:e9:12:c7:f1:5c:b1:8e:7d:46:5f:
97:68:d2:d3:48:bd:43:4b:b0:fb:89:96:a6:e8:61:
b7:8c:23:c7:33:d4:ee:a0:c3:7b:9a:cc:6d:0b:89:
fe:ae:0c:41:53:2a:40:be:c4:a3:f5:6a:91:3d:47:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.16.0/23
Signature Algorithm: sha256WithRSAEncryption
09:39:18:53:eb:36:fb:a8:27:bc:63:90:97:d3:9c:d4:6a:57:
cf:8f:5d:b6:94:8f:41:87:fa:1e:e7:72:18:81:05:ad:4b:80:
ca:ac:04:15:ee:4d:0c:2f:d9:bb:a8:e2:ac:a9:fc:fa:b8:a7:
33:6b:e7:63:9e:38:fc:09:9b:d6:d7:67:e1:6e:54:d8:a1:6f:
6f:be:56:7b:8e:e5:75:aa:b4:b5:07:e9:74:9f:83:96:b5:e4:
2b:53:e5:12:b7:21:86:37:e5:7a:74:ba:36:90:3d:18:a8:33:
d1:a8:c0:f4:88:53:2d:00:40:fe:15:b4:0b:b2:d4:e8:5a:5b:
a5:c3:5e:4e:77:25:e1:76:ec:33:5b:71:ec:33:13:00:42:86:
18:a4:f7:17:61:42:87:cf:bf:6e:c8:28:e6:25:9d:19:68:d6:
03:bc:7c:46:27:81:ec:23:0d:de:e6:06:ee:14:6f:cd:cb:35:
d4:dd:33:63:aa:fe:da:3f:fe:e5:0d:bf:5c:ee:df:d3:5d:a7:
19:5b:2f:94:0b:90:63:2e:88:e2:d2:f2:2d:4a:12:d6:5a:71:
b2:3e:50:16:d2:47:95:3a:41:b0:20:f1:6c:61:3b:3a:d3:86:
3c:e5:00:59:de:b0:cf:94:8a:46:f0:82:52:6e:63:b2:77:ed:
84:b2:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:09 2026 by rpki-client