Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
File: xeslRrtzrOaT4ZqxB9g_JmYyzug.cer (raw, json)
Hash identifier: PO7cya4JNTpH9Wf0SSg68bTr+i5D2yp8+RTKzMHrq5U=
Subject key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 50FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:02:29 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.50.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20733 (0x50fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:02:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:8e:b4:d7:40:1a:3c:ad:cf:64:02:ef:96:
fa:14:1a:c2:1b:95:c6:b6:46:0e:c6:7c:e9:cb:cb:
b1:fa:50:66:18:07:48:d0:9f:e4:0f:f3:4d:67:72:
69:cd:38:55:fa:e0:92:5d:f2:76:ca:76:05:ea:5f:
1e:a7:f7:95:47:87:8e:68:e6:99:b3:ae:8d:e4:f1:
82:1a:b6:4f:ac:f3:77:3c:ad:c7:69:f0:d4:90:d2:
24:1d:1d:e4:f2:b6:b4:e7:24:ab:7b:08:b7:fa:ba:
85:d3:8c:a9:9d:78:a8:4a:4c:8b:f0:e4:44:d9:f4:
a1:93:ac:6d:d1:13:65:e5:6e:43:1e:ea:c8:12:fc:
7b:0b:9e:56:bd:cb:d0:55:ca:5b:58:18:42:22:db:
d0:0d:df:fd:08:11:5f:0c:37:2e:2e:0a:0b:3e:f8:
87:06:e0:b3:45:ce:aa:ee:88:0d:5f:cd:d6:ac:e0:
ba:9a:4f:d8:af:e2:b5:5a:eb:18:ba:62:76:e3:78:
36:23:63:3f:e5:92:a7:13:0c:d5:16:e3:89:34:38:
58:62:64:6a:04:f9:52:8b:0e:aa:8c:93:c0:75:4a:
e4:2d:60:84:e0:1d:fe:70:2e:76:da:f9:1e:c3:f8:
0b:04:5f:16:e0:65:74:c3:7a:af:f5:75:30:7f:be:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.50.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:69:55:35:1c:59:74:67:a0:84:07:3d:99:86:07:39:8a:45:
8d:22:49:ad:b7:69:fd:12:d7:ca:4c:8a:2e:6d:98:06:8d:f8:
3d:88:96:56:71:5a:e5:ae:f2:1e:55:a8:f6:87:da:9c:ed:84:
d6:eb:62:81:a7:a1:60:c3:cf:53:0e:d4:b4:fa:09:8e:93:8a:
3f:36:f5:b3:6f:d0:9b:ee:15:14:87:8f:06:85:fd:46:6f:81:
ab:45:e3:15:9d:7c:1d:2e:f3:68:e5:d4:19:01:67:a2:59:8b:
f9:9f:63:ee:e7:4d:d1:ca:32:82:de:3b:26:c0:21:2d:95:93:
9b:66:07:d9:29:9f:be:de:ed:49:e2:cd:96:20:5b:b9:60:61:
1e:29:42:c4:5e:2a:1a:8a:57:8d:3f:d4:72:01:3f:ad:64:0f:
68:67:44:e0:6a:7e:82:1f:18:a0:92:ca:8f:10:19:cf:72:30:
80:57:83:e4:bd:2d:c8:75:72:8a:60:d2:d7:8b:8e:7f:b6:47:
db:b7:07:10:21:23:c9:24:db:3b:a8:f0:bd:15:f5:a4:54:24:
28:63:39:a3:39:1c:0a:b9:4c:f6:eb:c0:b6:62:ff:35:04:a3:
74:60:f3:87:32:fe:c4:be:5f:97:a5:5c:ac:c9:64:2c:18:36:
7d:cb:dc:42
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMjI3MDMwMjI5WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5N0E1NTExMC8GA1UEBRMoQzVFQjI1NDZCQjczQUNFNjkzRTE5QUIx
MDdEODNGMjY2NjMyQ0VFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AI7CjrTXQBo8rc9kAu+W+hQawhuVxrZGDsZ86cvLsfpQZhgHSNCf5A/zTWdyac04
Vfrgkl3ydsp2BepfHqf3lUeHjmjmmbOujeTxghq2T6zzdzytx2nw1JDSJB0d5PK2
tOckq3sIt/q6hdOMqZ14qEpMi/DkRNn0oZOsbdETZeVuQx7qyBL8ewueVr3L0FXK
W1gYQiLb0A3f/QgRXww3Li4KCz74hwbgs0XOqu6IDV/N1qzguppP2K/itVrrGLpi
duN4NiNjP+WSpxMM1RbjiTQ4WGJkagT5UosOqoyTwHVK5C1ghOAd/nAudtr5HsP4
CwRfFuBldMN6r/V1MH++p50CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTF6yVGu3Os
5pPhmrEH2D8mZjLO6DAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTdBNTUvQjMyQjUwMjhGN0E1MTFGMDg3RTUxRjE2NTU2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk3QTU1L0IzMkI1MDI4RjdBNTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6
ck9hVDRacXhCOWdfSm1ZeXp1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZeeMjANBgkqhkiG9w0BAQsFAAOCAQEAnWlVNRxZdGeghAc9mYYH
OYpFjSJJrbdp/RLXykyKLm2YBo34PYiWVnFa5a7yHlWo9ofanO2E1utigaehYMPP
Uw7UtPoJjpOKPzb1s2/Qm+4VFIePBoX9Rm+Bq0XjFZ18HS7zaOXUGQFnolmL+Z9j
7udN0coygt47JsAhLZWTm2YH2Smfvt7tSeLNliBbuWBhHilCxF4qGopXjT/UcgE/
rWQPaGdE4Gp+gh8YoJLKjxAZz3IwgFeD5L0tyHVyimDS14uOf7ZH27cHECEjySTb
O6jwvRX1pFQkKGM5ozkcCrlM9uvAtmL/NQSjdGDzhzL+xL5fl6VcrMlkLBg2fcvc
Qg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:48 2026 by rpki-client