Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
File: muOXelmM-YG98IVk3ctr8rapZBs.cer (raw, json)
Hash identifier: 318nvkg3XBGSbEUO7jr8WB9m3+RWrzwiXoDr52B/384=
Subject key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 518A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:14 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.86.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20874 (0x518a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:14 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:2d:8f:e9:81:58:76:e1:56:5c:e2:d1:b6:
d5:9d:45:f3:9a:c3:b3:d1:42:2a:91:3e:6b:d8:e8:
27:a2:bc:c9:1b:57:11:31:3d:49:2d:e1:40:f1:15:
80:bd:3f:6d:ff:69:67:79:d9:3d:19:c7:16:8c:bf:
69:db:a0:3f:8f:e2:e0:53:98:a4:1c:eb:32:e8:d7:
e7:3b:95:ed:f2:bc:14:e5:55:00:82:bb:93:0a:b2:
a9:07:c8:02:e3:28:30:36:99:dd:ba:1c:ce:99:ca:
d9:0d:5b:2d:0d:ad:07:a4:91:94:a1:2f:a1:7c:63:
cf:e1:98:c9:f7:17:2a:94:92:ff:5b:8c:05:8d:04:
8d:cf:60:a4:9f:78:b8:1e:02:1d:b9:1f:75:78:d2:
bd:11:ad:5c:41:c4:06:61:32:cf:96:f4:c6:f9:a5:
b1:3e:45:5e:de:c5:05:f2:49:3b:49:2c:20:1c:be:
eb:6f:a3:98:c5:18:76:9b:8c:41:69:44:82:82:6d:
b9:5a:1c:11:da:d2:02:04:9a:a1:89:4e:f6:35:06:
b1:74:00:7d:3a:fc:13:14:6e:a1:7e:6a:49:c2:ac:
01:43:87:a9:6d:bf:6c:d1:d1:23:53:c7:91:c1:fb:
1c:38:bd:51:13:75:79:76:9b:e5:03:a5:e1:40:38:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.86.0/23
Signature Algorithm: sha256WithRSAEncryption
52:fe:df:9e:dd:eb:38:3c:dd:7c:8f:24:61:09:37:1f:9c:1c:
bc:2f:55:23:47:34:ba:77:c2:8d:8e:c4:77:5f:52:23:f4:d7:
c4:50:22:d5:10:ab:81:4d:48:fb:b6:c6:88:1c:78:c2:f4:a4:
29:bc:3c:4e:18:87:2f:81:a7:8c:aa:fc:d6:91:16:13:6a:35:
fe:5f:ac:93:c3:42:93:3d:0b:9e:23:a4:77:76:e3:a0:74:2b:
59:24:2e:f6:64:48:54:ce:20:da:90:e8:6f:79:ac:df:22:0b:
97:af:82:58:59:df:2a:d8:71:e3:7e:44:4c:7a:7e:59:f0:3a:
75:fd:25:9a:02:39:2e:8c:70:01:81:26:31:42:68:e2:0c:87:
46:5f:82:20:fc:55:0e:c7:57:d2:55:d1:83:82:4b:56:42:27:
70:8e:67:de:12:bd:67:ea:4b:68:36:ab:cd:3a:ec:fa:a4:d7:
bc:34:7e:ec:89:00:e6:cd:21:d4:b8:62:33:8d:37:bc:d5:d2:
f0:4f:5f:6c:ce:71:41:a1:7c:43:d5:c7:e9:31:cc:73:ae:7d:
32:f2:67:22:ca:8d:2b:11:d8:37:ef:ee:1d:39:23:e3:a4:e3:
11:dc:08:fa:c8:53:1a:6c:fc:96:30:38:2a:37:55:5a:bf:4d:
09:60:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:31 2026 by rpki-client