Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
File: l7RGIWN5hXcArWW5-v7sfJIsItg.cer (raw, json)
Hash identifier: bhAckw6f/ULQ03kh0VFROB2QHBlCo38JDlSadHPCDig=
Subject key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5183
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:01 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.231.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20867 (0x5183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:01 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:03:19:74:c8:55:ec:8b:86:00:ea:95:9a:
87:1e:1b:51:ad:c3:73:8a:b9:4a:33:3d:8a:51:d5:
90:a4:20:73:53:25:0e:d3:77:c3:2d:5b:f4:48:15:
c5:b4:41:7e:31:fd:ce:87:32:8a:3b:0d:45:d5:89:
48:69:3b:a0:21:6e:9a:b3:65:58:17:f0:7d:e4:67:
c0:e0:d6:33:98:60:af:ba:ec:1b:39:b5:cf:f9:cf:
22:e8:82:41:99:30:5f:80:d6:50:de:07:72:d2:bb:
f8:68:1d:da:f2:e7:20:ef:8a:61:75:fe:da:07:b4:
35:28:96:84:8e:8b:42:df:1f:f4:83:24:eb:06:84:
65:1b:97:51:07:e6:43:f0:f0:fd:1d:71:43:15:22:
78:62:0a:68:4b:04:f1:d5:69:59:d7:da:ea:d4:ca:
4b:14:b4:2f:57:6f:4d:f8:8f:f7:d0:d5:9d:ca:a0:
e1:96:50:f8:76:b5:07:6d:81:b3:58:e3:ba:32:06:
5a:bc:51:3c:2b:64:b9:c3:bd:ae:d9:be:04:a0:4c:
0e:ee:82:2e:50:b4:73:00:4e:ca:e4:e6:6d:eb:cd:
06:4f:0e:8a:96:ba:a9:4f:4d:5b:3a:c1:52:1e:6e:
94:56:97:6f:96:69:c7:1e:7b:59:34:8d:2b:74:fc:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.231.0/24
Signature Algorithm: sha256WithRSAEncryption
16:92:92:7a:b2:7b:25:80:48:f2:3e:19:c3:9a:03:d5:30:d6:
89:0d:64:83:ac:64:80:bc:c3:5d:68:3d:05:25:55:5c:0a:29:
a6:c1:e8:a4:3e:04:7c:00:d7:0d:3a:86:ea:0e:2b:12:5a:c5:
f2:97:35:20:0c:2b:2f:20:5f:11:a4:7a:a9:22:c1:bb:8b:a2:
52:f4:3b:2d:39:6a:58:af:39:39:ca:8b:1a:c8:97:36:f5:d1:
05:01:35:ff:67:62:bc:94:5d:69:18:d7:80:1c:fd:75:c7:5d:
05:57:90:ab:1f:a2:f9:43:82:fe:e2:cc:a5:67:5e:9a:a2:3b:
53:0d:5b:36:ae:65:a2:30:64:77:e3:bc:ee:d5:4a:3d:a5:44:
ff:41:be:dd:e4:cf:a4:e0:c2:d3:6d:c2:04:fd:bb:ea:9d:f5:
20:46:d5:23:51:3e:7d:27:3e:cd:24:3b:86:ce:00:b2:9e:74:
24:00:03:64:2b:b6:7d:cf:1f:43:33:96:4e:13:29:50:68:07:
2d:4f:bb:39:cf:97:ff:2d:19:04:af:7b:e9:3c:ea:6e:18:70:
d9:f5:9d:df:10:22:8b:4e:43:98:56:7c:e2:a0:74:5e:33:c9:
93:3c:2c:b3:68:77:97:05:a6:18:b9:12:15:0c:c0:95:13:4b:
d0:53:e1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:24 2026 by rpki-client