Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
File: mpJehowmrjzn4Iztb8MRL2QPLM8.cer (raw, json)
Hash identifier: 2080Z3+LG3M/8BXDr/hij0cIJO9AYwIPxOFEdL6B2Gw=
Subject key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5193
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:27 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.206.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20883 (0x5193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:27 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:6f:b9:50:e7:e4:ce:60:d3:2a:5e:e3:45:
de:dc:7a:41:34:d0:01:1a:f4:13:3c:ab:ed:a6:2c:
2c:ff:7c:99:14:1e:d1:a6:75:7d:b5:7a:bb:92:c6:
8f:cf:56:f4:39:e1:13:f4:2f:b1:34:e5:d3:e5:33:
e4:4f:13:13:e9:61:3c:37:d1:90:d4:5c:44:ce:8c:
c5:77:62:66:a0:ad:68:82:ad:d6:06:5c:91:ed:c8:
c0:62:f1:0e:87:be:c0:17:8d:fe:08:23:88:c6:5e:
59:52:d0:6b:2d:7d:ad:cb:3d:17:f3:64:cc:f6:4b:
1f:d1:d4:da:fd:85:fe:7b:c9:e2:79:7d:78:e4:2c:
6e:5b:4f:35:72:23:0e:f5:0e:0e:d6:3b:76:7a:a3:
7f:28:27:f1:40:fc:40:f1:26:b7:b9:bb:17:ba:d3:
6c:cb:f5:7f:f9:fa:5d:b2:59:9f:9f:e0:f9:f5:71:
29:1b:07:fe:e4:05:e6:0f:86:c1:65:a8:8d:b1:8f:
16:4c:0d:f2:9b:a7:d7:79:3c:d6:cf:36:ff:be:b3:
bc:cd:22:a8:21:d4:9e:87:cf:40:e4:1c:67:08:c8:
89:a1:69:e9:57:ec:ef:4a:fe:1b:bc:32:a9:b8:17:
f2:60:d8:61:01:ee:af:70:4d:b3:b5:36:62:4b:60:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.206.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:c7:03:9a:7e:75:37:61:b1:02:20:9e:db:ea:95:b4:f9:ad:
c7:81:8d:75:c3:27:44:1b:07:dd:8a:3d:c1:89:89:07:08:ca:
1e:84:50:ff:e2:34:5f:fa:59:70:7d:43:05:7a:f9:d1:b1:f6:
30:a5:87:11:a1:20:3a:81:48:5f:46:99:34:fc:23:cc:36:9f:
9c:55:65:88:2d:4a:ec:20:e6:33:bf:37:ea:43:b4:78:ec:b4:
66:df:a4:0f:60:3f:2e:3f:f1:1a:45:a1:f7:71:81:53:93:12:
09:d7:5e:49:6d:3d:cf:89:11:3b:40:ca:0d:5e:9c:48:af:2a:
f2:73:85:c2:87:1d:0b:4e:d6:38:08:e5:71:93:c3:7a:37:ee:
84:f7:47:20:f9:66:c8:cc:49:e7:37:70:d4:70:59:34:3b:12:
c5:fd:90:d9:39:ea:f3:4d:46:20:e6:d1:91:c5:d6:eb:a3:0a:
22:6d:d9:db:14:31:de:4f:70:e6:2f:92:42:5d:29:a4:16:05:
dd:5f:4b:c8:29:55:1c:f2:d4:b0:de:fb:61:da:23:f0:a1:e7:
14:85:df:ee:5e:5d:fb:26:ce:27:53:4f:d4:c0:00:c1:0e:19:
d2:cd:c8:60:82:b8:e6:77:c7:14:31:64:8c:a1:71:3d:e9:26:
9c:cd:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:33 2026 by rpki-client