Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer (raw, json)
Hash identifier: WUycQ4qpZijBJyCdDWTXEbvC1huaWUgQalNy19mbuWA=
Subject key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5170
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:04:39 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.30.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20848 (0x5170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:04:39 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:05:71:01:98:74:7f:5f:18:1a:3f:a6:af:
15:9e:21:d4:3c:9b:bb:ae:9b:45:aa:12:ca:bb:24:
3e:14:ac:7b:59:39:0e:66:d1:e3:5e:a9:6d:e7:b3:
2c:4d:6d:12:d0:67:db:d1:a5:67:97:d6:40:71:3e:
e4:95:a7:e4:ac:a9:5b:c2:25:34:b6:61:3f:a8:c6:
75:68:4d:76:cb:0f:ce:67:df:b1:e0:f0:aa:f5:24:
3c:ee:d9:c1:9b:ca:a5:17:31:6e:a1:56:a8:18:34:
99:76:ee:f1:c8:db:c0:51:42:27:59:73:e8:60:e3:
39:2e:48:66:b5:b1:a4:c0:5c:2f:8f:5c:67:7e:1f:
bf:98:a6:df:1c:89:49:66:00:59:19:28:d4:0b:14:
01:22:8f:dd:e2:82:25:f1:a0:54:09:e7:b7:f6:b3:
bd:ea:97:28:04:0b:8c:91:c0:31:9f:85:18:e3:f8:
35:60:34:c4:82:7f:4c:7f:7e:b2:74:50:ac:eb:24:
de:1d:f1:8d:52:c1:de:72:44:c1:a9:da:ef:22:17:
16:0c:11:6d:1b:c1:84:62:ed:7c:31:a9:b8:9e:2c:
ef:e7:b6:a6:e3:3a:8e:7e:8b:af:aa:49:a2:35:8e:
eb:5c:37:76:90:7a:6c:ea:7c:c7:bc:32:eb:eb:30:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.30.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:68:59:30:2d:db:94:d3:84:a0:9a:5e:de:55:9b:71:06:b4:
95:4c:48:8f:83:03:7c:2d:be:bf:f3:e2:20:cb:f8:60:74:4d:
7d:93:b8:bc:3c:da:10:80:63:b1:df:09:b7:a5:ee:72:1e:84:
61:b2:b5:70:0f:58:a0:41:9b:c4:e6:6d:a8:d5:cf:1a:e3:73:
13:e6:5a:ac:00:d5:c3:ee:05:60:f4:cf:25:06:62:75:3a:85:
33:80:33:05:65:11:9b:0f:53:8c:be:9f:d1:6e:ee:32:f6:86:
d0:bd:1f:0a:61:f5:77:31:3f:af:4f:aa:a5:36:4c:28:0e:99:
58:d9:60:25:62:fe:16:b0:00:19:03:22:c7:36:bd:59:79:cf:
8e:91:0c:db:06:14:89:4f:53:c1:0c:b0:52:53:b4:c9:b3:ff:
31:f6:b7:8c:6e:51:eb:44:f9:88:33:7a:25:b2:19:f9:37:25:
93:9c:7a:16:62:b0:a0:7f:64:cb:91:6d:07:5c:07:29:97:9c:
c8:78:cb:80:d2:7e:c6:85:d2:ef:3a:14:d8:2f:14:f8:7d:b9:
9e:96:bf:be:ce:fb:65:36:07:27:9c:f9:44:05:43:61:a5:52:
60:b1:6c:9d:dc:97:dd:1c:92:35:a9:61:4d:6b:f8:1a:22:ef:
1e:58:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:28:20 2026 by rpki-client