Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
File: sc2DuJnOYCmsikIu278VgzU5HQg.cer (raw, json)
Hash identifier: 2kw/mX62blGmXfQVVjWSfvZ1LDJB7VAboURaRusPL8U=
Subject key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 510C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:02:46 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.2.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20748 (0x510c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:02:46 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:59:4c:d0:44:ae:ff:46:00:80:34:cc:88:
1e:b7:a9:7d:20:3f:6a:bb:3b:b3:9f:12:02:86:b2:
a5:b9:44:77:64:cc:6d:7d:79:4d:b1:55:3f:16:4d:
30:15:05:56:45:30:b8:0f:0d:0b:13:78:cd:64:bb:
e5:b9:99:1e:05:e6:84:11:f3:b1:3d:b4:e9:fa:97:
07:18:2e:2e:d9:d4:7e:9f:fe:21:77:13:5a:8b:7e:
6a:d1:f5:fc:03:41:1e:4e:81:c7:a9:a7:28:58:c1:
fa:47:34:81:4b:82:ce:e9:47:3f:86:f2:6e:f8:54:
91:b7:7e:cb:8f:99:9c:13:f7:ca:f2:e1:b4:c6:49:
75:4c:05:8e:3a:e6:2a:e0:78:a6:59:05:4a:f1:50:
31:0a:8c:ae:0c:b9:a4:e2:26:d8:a0:ca:a2:f8:9e:
1c:9e:5e:c3:79:48:3f:d6:7d:81:e6:83:d6:67:b1:
87:6b:7d:ef:d0:8d:88:66:14:aa:72:2e:0d:93:c0:
f3:17:02:81:db:d3:63:31:dd:72:97:f3:76:67:16:
97:85:10:33:60:3d:6d:87:a6:34:3d:a7:14:86:08:
b8:6e:21:10:c2:de:62:d9:f3:95:34:bb:3b:c2:90:
ec:eb:f5:65:a3:33:b3:ac:80:e7:e1:db:ce:b6:68:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:4a:5d:f9:6c:3d:8f:28:9d:da:26:78:5d:8b:d4:4b:13:10:
ad:d1:88:83:d0:c6:c0:0d:47:10:3a:4b:d5:35:f9:27:9a:1e:
d7:6d:8a:87:6d:df:91:d1:cd:62:09:8f:0c:e6:a9:9a:50:05:
90:78:d0:76:ab:e9:b8:d5:c7:35:e6:2c:43:9d:ac:54:2b:ba:
95:37:1f:a8:24:04:a6:07:e2:0c:44:1f:73:e4:31:0e:99:2c:
0c:fb:c6:37:cb:bd:39:7a:09:1f:c8:9d:ef:c4:63:f8:62:9d:
7c:5b:8e:72:8f:83:3d:26:90:09:e5:6b:19:a7:b5:2d:84:4a:
21:ec:82:ca:0e:5c:f7:4c:e8:db:20:46:4b:4f:fb:78:81:38:
bb:7e:89:23:1d:28:7a:a4:70:fa:04:ba:a1:29:b8:5c:32:dc:
17:c4:cd:76:a9:1f:c3:31:ec:78:a4:3c:bf:70:77:fa:35:79:
0c:bf:46:2d:0b:71:d4:a2:e0:92:c6:b5:3b:c9:ed:42:4a:1b:
17:70:f3:0d:ba:f6:6f:e2:9a:a9:c1:ca:a3:10:1c:fc:5d:d9:
91:6b:a0:b0:76:b8:c2:76:53:f9:8c:e3:49:e6:47:00:bd:a1:
7b:c8:42:da:4b:37:b5:a6:85:0e:1b:38:83:32:cc:0e:19:52:
06:20:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:20 2026 by rpki-client