Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/t2w1jO-Yw2qJZnoHXjjK36cosew.cer
File: t2w1jO-Yw2qJZnoHXjjK36cosew.cer (raw, json)
Hash identifier: X8soRZZkR9TtO+VzYwziL4kbNymd21a+gHVPvwpKWTE=
Subject key identifier: B7:6C:35:8C:EF:98:C3:6A:89:66:7A:07:5E:38:CA:DF:A7:28:B1:EC
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 53B2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 07 Jun 2026 02:25:34 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.62.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21426 (0x53b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 7 02:25:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C8A07, serialNumber=B76C358CEF98C36A89667A075E38CADFA728B1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:c3:e8:2f:c8:a5:ab:e4:71:c5:f6:9e:96:
91:b5:22:63:b3:ea:9b:95:d3:f7:c6:b0:3b:71:57:
8b:02:c6:89:28:1e:8f:b9:0a:16:2a:11:10:f3:d1:
99:55:79:94:c8:ec:05:1b:a9:df:ac:0b:8d:df:80:
d8:30:74:43:3f:51:c7:c5:fa:57:19:6b:d1:b2:01:
c4:63:20:d9:37:3b:e3:e3:0e:7f:2a:db:ac:0f:27:
08:c0:3a:62:55:c0:c6:d9:26:5f:80:45:9d:e3:4c:
e5:06:ad:2d:b1:ad:69:35:eb:05:a3:1b:d2:7f:1e:
71:b1:fc:87:69:45:dc:43:c9:c9:4b:1c:e3:62:92:
9f:0a:c4:0f:95:67:33:61:be:a6:38:42:99:cf:a7:
94:b3:51:6e:96:0e:ab:87:a1:61:31:d8:b7:5c:6c:
6a:32:cf:79:de:7e:45:95:ad:09:db:8d:e6:f3:7e:
07:fb:bd:f2:dd:67:31:5c:ca:a8:df:83:25:d7:78:
36:56:c8:ee:be:7f:54:87:15:aa:08:b0:76:35:42:
b4:66:da:8d:3f:d6:a6:5a:40:35:3a:fe:71:16:ee:
23:5d:cd:e2:87:c9:47:2e:3e:87:26:69:56:a0:34:
97:2a:77:1a:4c:81:5b:2e:92:6f:ea:10:b7:65:0d:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:35:8C:EF:98:C3:6A:89:66:7A:07:5E:38:CA:DF:A7:28:B1:EC
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.62.0/23
Signature Algorithm: sha256WithRSAEncryption
17:90:ff:45:a7:6d:2f:51:cc:5a:f2:16:7c:e3:c7:2a:5d:22:
75:b7:ff:6f:5e:8b:74:82:3f:e7:37:69:28:a3:df:99:7d:8a:
5b:08:89:9f:a1:59:22:ac:9f:af:55:df:59:40:15:8c:9b:b8:
43:00:df:67:a8:35:ee:e9:23:d4:79:ad:07:c1:f8:35:06:fc:
bd:fa:db:9b:12:d4:f0:c3:5f:28:d1:ea:47:42:4d:37:d3:c4:
a4:ec:d4:0f:11:f7:bc:fb:de:09:c3:b9:d6:f2:93:58:ee:79:
e3:6a:cc:61:d2:a4:41:6e:d8:23:a8:4d:b6:b2:66:19:2e:a2:
c4:ba:92:2f:5f:ad:49:1c:a0:af:48:2b:8e:11:d6:04:c5:13:
55:91:6d:c1:41:20:28:38:92:b5:aa:08:41:14:86:a1:2a:a6:
bb:b8:ea:35:33:6b:26:b3:a5:8a:6b:fe:a7:c2:79:0b:0a:cf:
91:93:74:90:d2:da:60:ca:e4:d5:c6:62:f8:4a:f3:db:31:e9:
c2:ac:11:47:8f:86:c0:59:9e:d3:6e:07:b7:57:10:98:fe:c9:
5e:83:54:00:3a:fb:6b:f8:80:a9:b6:e2:f0:34:86:85:b8:58:
bc:e6:ea:c8:b1:8a:15:0c:67:0a:0a:c7:47:1b:79:d9:26:d9:
2c:5f:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:23 2026 by rpki-client