Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
File: rjnJrCEn_qcOoyYOwW0giDxVdfU.cer (raw, json)
Hash identifier: NBU1kiZy3/MtZ7kNEvsS+sfgGFERq1jyJrjyYr6WYIs=
Subject key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5185
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:05 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.112.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20869 (0x5185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:8e:df:8c:57:7a:3b:c1:13:39:13:21:9e:
3c:0e:63:b2:73:58:0e:f0:9e:f6:62:31:24:35:04:
89:28:bd:97:ae:99:97:a2:c0:2a:89:24:83:f9:85:
49:b3:70:5b:19:47:92:64:b6:49:90:61:a6:7d:64:
73:fa:a3:83:78:84:02:cb:95:03:af:46:fc:df:27:
1d:7f:28:3e:d1:4e:b3:b6:82:57:fb:0d:a7:85:3b:
c5:78:a4:44:ec:6c:f5:84:51:36:60:5a:6e:78:f8:
39:34:12:e8:24:32:12:44:17:67:75:74:c8:10:33:
a0:69:fb:91:a2:13:fc:98:59:3a:e7:72:fc:ed:87:
89:5a:6c:33:7e:d9:55:95:1a:98:4f:75:dd:f3:02:
07:77:6e:c8:a8:72:da:1c:f6:7d:ce:a4:b8:ca:03:
c1:9b:f4:26:d3:08:a7:ce:a8:d4:54:65:1a:c5:64:
c3:8c:e4:89:43:e3:fe:aa:be:a0:ce:2a:2c:3b:4d:
df:5f:58:07:6d:ca:1a:0b:d8:f1:50:d8:b5:24:12:
91:9c:49:41:19:13:c1:1c:89:c8:49:32:12:4c:d8:
c7:bf:51:a1:7e:d7:5e:4e:1e:57:d0:ee:34:65:dd:
47:b2:9b:c9:0b:15:0c:33:f4:39:40:f8:ab:c9:ae:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:97:a8:70:bf:00:6c:cb:b9:68:87:39:90:1f:25:a8:01:05:
3c:cd:2d:bf:9b:b1:6e:fa:42:60:10:30:74:b2:2a:f2:7c:d9:
67:4c:1b:0c:0c:28:93:51:76:df:f2:1d:ff:8d:2c:b4:34:c8:
82:dc:b1:5a:57:8d:37:49:db:da:42:74:02:eb:4a:07:02:a8:
08:81:72:1b:27:46:8b:74:3c:a6:48:ff:0a:c4:2c:ea:00:0c:
20:19:6d:15:40:08:b1:0b:da:f3:3e:fe:03:f5:8d:54:79:80:
6e:34:06:dc:cc:57:7c:7f:30:86:37:60:77:7f:0d:30:06:2c:
86:45:1e:75:f5:7c:60:d8:d4:c4:9e:90:40:8d:56:db:ca:98:
e6:a6:c6:55:9e:e9:66:73:33:be:49:ee:dc:b9:d8:e9:a3:70:
a4:41:74:8e:b1:89:05:90:88:ca:48:8c:2b:8f:b6:e5:68:be:
b5:a0:1b:d6:05:21:fc:2f:3c:22:73:cf:44:06:57:90:6c:63:
f7:99:ef:39:fd:2f:11:92:03:85:69:8b:b0:f7:4a:e5:f0:46:
cc:31:e5:97:df:7e:0a:f6:1c:7c:a2:d8:6e:05:5f:c3:30:d5:
4f:2a:8f:85:18:91:3b:f3:f2:6a:31:b4:7b:a8:d7:49:b5:04:
42:df:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:51 2026 by rpki-client