Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
File: xjZVadKEkQKf5Efl8-v2jxMB1bs.cer (raw, json)
Hash identifier: Zp1av8lrrwk50GqTrSkVdBDvfzT8MlmllxHVJ0joClY=
Subject key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 518E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:20 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.158.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20878 (0x518e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:05:20 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:96:ec:b7:17:9f:63:dd:8d:22:56:b8:4c:
3c:7d:d4:82:83:d3:37:ee:6a:20:ef:1c:6e:42:f2:
a3:7b:bf:83:a0:4e:30:64:2f:ec:f2:81:3f:76:8d:
b8:6e:8d:fe:2f:a5:72:33:1a:c4:2f:b1:2c:66:f1:
b8:8d:86:94:a4:a1:47:3f:f0:e2:cd:3e:aa:93:80:
83:a4:35:9b:22:9b:99:05:d4:24:73:d8:fb:0e:5a:
90:3e:19:f4:c5:e2:94:d4:bd:e2:e7:f6:70:39:ae:
ac:7e:de:55:e6:9d:85:14:d5:48:a8:be:11:f5:42:
5f:bd:29:a2:f0:37:bf:de:04:4c:5d:ed:e6:f6:2b:
70:38:27:22:1b:01:95:8e:cd:32:80:df:75:f9:a6:
8c:21:bd:4c:06:b3:85:af:2f:16:46:44:ee:91:d8:
7d:d1:73:8b:e3:f5:87:b2:9e:d8:31:5a:c9:68:4a:
71:2b:4d:82:ca:6f:d1:d0:35:d2:0a:b5:db:1b:6e:
52:c1:f5:0c:5d:5c:b6:ac:fc:cb:97:c1:92:47:94:
cd:fb:d5:fa:d0:c8:83:96:88:a5:51:6c:73:0e:e2:
78:d2:7e:e7:85:f8:2e:2a:85:d5:62:cd:a6:81:71:
d9:c9:7f:33:22:5f:ec:f0:15:22:06:7b:32:f0:16:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.158.0/23
Signature Algorithm: sha256WithRSAEncryption
88:2c:91:8b:98:a6:fe:b5:54:4a:de:5b:9c:da:7a:04:b2:fa:
94:9e:e5:d7:2f:79:1d:28:22:d8:76:1e:66:eb:78:1c:05:56:
45:71:cc:09:6c:3a:bb:c7:c9:39:32:92:c6:a2:e3:82:e9:de:
7c:e4:16:55:64:da:17:75:ee:3a:5e:20:b8:0b:36:97:ca:4a:
13:af:46:93:04:c4:32:00:f8:51:09:fa:d0:69:2c:75:96:09:
6b:7d:81:c4:41:98:d5:11:cd:93:f1:25:b3:52:10:b8:ca:a2:
06:3e:21:01:d1:ee:13:56:5b:7b:37:c9:7d:df:76:d5:70:4f:
9b:ee:ea:de:5c:14:4d:9c:9c:a4:0d:2b:c5:78:56:05:a9:ca:
e1:87:d4:6d:d7:59:9a:06:57:d5:44:fa:93:e9:9f:30:d2:5e:
a4:c6:e1:0b:f0:b8:00:c7:ad:38:77:b9:98:11:28:ee:cf:38:
bf:ea:af:6b:06:b1:3d:11:ef:85:b7:9b:5d:36:d1:0f:63:d9:
72:96:33:9e:27:90:2a:50:e3:cf:99:20:d8:71:a8:31:b6:e3:
fc:12:5f:6d:80:81:3b:72:dc:1f:c8:f1:ba:ec:04:a5:0c:a8:
11:99:06:0e:f4:a2:61:44:89:3b:48:3e:54:d3:05:35:eb:b2:
10:fa:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:50 2026 by rpki-client