Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
File: zcaQgy8tEjXavx7zF_EbaV7r2k8.cer (raw, json)
Hash identifier: 0vKEIOuIUC5pttg42uI9ASscL7yuJiv+vyG76TY//v4=
Subject key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 513D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:54 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.134.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 13:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20797 (0x513d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:54 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:d1:59:a6:98:09:2c:4e:85:a5:df:5d:4f:
76:5d:db:47:2a:c4:77:f4:a8:0f:c9:e0:5b:4d:87:
e2:f9:87:19:87:1a:58:39:4b:55:bd:18:5b:77:9e:
d2:8e:90:a3:a8:9e:49:27:d8:96:e0:6e:37:07:12:
48:d0:8c:22:8f:18:ee:40:a3:66:a7:23:79:87:71:
5e:04:c6:03:41:5f:65:a1:4f:16:04:2b:df:d2:53:
fa:5b:50:75:a3:7d:c1:57:a3:ec:36:d2:ce:35:85:
90:b3:0b:18:bd:70:5a:52:f1:e2:f5:fe:26:7f:f9:
63:b0:a7:41:1e:f7:b3:3e:c6:4c:26:c7:16:29:47:
83:46:84:68:70:5d:0f:23:58:c2:08:16:6d:81:ed:
e7:e7:c2:56:52:60:8a:6f:64:f8:0f:45:10:d8:fa:
0d:1b:bb:de:57:ce:b6:27:4e:db:ae:d8:62:58:bc:
2d:a8:13:bd:de:39:85:6a:c7:15:aa:15:0e:9b:e2:
16:b9:37:1e:16:2e:38:35:ea:90:1d:b4:7f:e4:8c:
99:1a:b6:18:57:a5:8b:1a:03:51:f6:34:a6:ae:80:
a2:f3:3c:9f:a3:e8:01:17:24:21:da:09:04:94:a0:
98:d8:ad:3a:e7:08:b7:03:a7:34:11:42:a8:46:cf:
57:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.134.0/23
Signature Algorithm: sha256WithRSAEncryption
86:13:eb:d7:77:ac:5f:44:9e:df:05:df:df:55:00:83:9d:3c:
07:40:16:98:0a:db:0a:f0:9b:0f:6f:18:74:76:10:d8:80:0d:
c2:ee:3d:1a:8e:69:47:42:84:15:6b:f7:eb:d5:e4:8e:be:69:
3b:f7:19:7b:7f:42:6f:78:9d:b2:bf:6f:55:d7:f7:15:9b:86:
32:82:ca:1e:2c:08:6c:16:96:88:1b:cb:95:72:cc:34:c6:48:
2f:1d:86:0f:17:91:7b:52:55:af:04:89:87:19:cc:47:86:e7:
01:0f:c0:1b:bb:c2:e2:66:6c:34:1e:3e:0a:66:8e:65:fd:73:
2e:2b:ee:cf:a3:69:aa:72:80:7a:5f:00:05:76:1b:7d:cd:d7:
65:16:88:e3:e1:d5:6f:37:04:1d:a7:a6:87:d3:a1:3e:e0:78:
db:7b:0b:4c:e1:33:cd:8b:65:11:9f:f3:03:75:cd:87:70:ea:
3e:3e:f7:06:08:fc:5a:88:5d:22:4f:19:71:be:8c:ee:47:e5:
d9:0c:e6:e6:7f:ec:85:dc:5a:0e:71:12:cf:de:48:32:59:34:
2f:e1:fb:15:8a:00:7c:f9:10:0c:f1:3f:c8:39:7f:d4:ef:3c:
8e:33:27:d8:50:12:e8:2b:7e:6f:1a:19:f2:c5:bc:23:fa:cd:
ed:b5:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:40 2026 by rpki-client