Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (raw, json)
Hash identifier: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=
Subject key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4A53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:01:55 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 154.8.120.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19027 (0x4a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Feb 27 03:01:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:ea:78:61:ab:31:ff:46:af:a5:c6:03:d3:
f5:19:d8:0e:72:51:fa:3e:91:31:eb:cc:8a:93:e4:
19:e8:64:5b:68:2e:33:78:05:da:f4:d5:66:8b:f2:
ec:73:9d:52:53:6f:15:3e:e5:58:8c:e6:21:7e:f3:
72:49:3b:38:e6:fa:70:9a:c4:d8:79:f6:2e:42:a8:
eb:40:61:e3:63:d3:6b:93:95:e8:d8:1c:80:ad:9a:
e8:0a:0a:36:d5:e1:0a:a4:45:4f:d2:77:be:ea:44:
8c:44:65:f3:53:61:77:4e:bd:90:21:eb:3c:9b:56:
a9:64:c4:e1:5c:8b:fe:2d:f6:29:8f:92:94:22:d1:
ae:39:0a:78:c1:42:c4:9c:7e:00:58:ac:c3:51:77:
56:46:cb:17:99:69:76:af:f3:4e:ca:60:11:f7:c5:
7e:df:f1:46:a2:4d:5a:91:03:00:07:ea:e3:39:ad:
fd:ae:63:dc:ef:b4:d6:2c:72:1b:8a:e7:a1:bd:03:
41:f6:fe:03:2d:90:9f:1e:81:e6:ff:6e:12:95:ae:
74:eb:d7:82:5e:db:3b:c1:e7:9b:94:da:c6:50:71:
d6:df:33:54:e8:a6:39:5e:e0:19:85:cd:58:6e:c2:
f1:a7:e3:ec:79:ad:bc:60:82:b5:a1:ab:06:6a:a0:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
83:92:c5:9e:8a:b8:72:d5:9e:3d:5b:55:77:71:c8:58:36:f9:
b4:a6:5a:5c:cd:24:43:24:f6:d5:e9:3c:ca:09:ac:3d:7f:09:
43:c7:b5:30:9a:9f:e7:03:b5:99:db:82:23:04:81:2b:66:2f:
43:c2:4d:fd:53:e3:8c:01:46:fe:3f:f1:eb:5b:2c:78:ed:24:
9f:46:48:b2:19:90:24:88:40:03:5e:6b:7b:22:bd:88:9b:f8:
dc:69:05:ce:e0:93:78:c8:c2:6c:30:0d:71:c0:be:d7:6b:c0:
97:8e:ed:04:18:ab:82:9d:03:02:c4:ea:a8:8a:42:3e:90:4e:
6b:7c:a5:b4:b5:c0:26:a4:7c:65:2e:f5:83:84:44:9d:76:2f:
60:69:62:51:98:b6:e6:ff:a6:7a:0c:42:d1:79:68:4f:18:c3:
75:08:eb:59:e0:7a:bc:de:59:64:e6:45:b4:05:10:dc:a7:a0:
61:7f:d8:a9:2d:8f:4e:4c:39:a3:20:35:3d:24:83:2b:8d:ce:
52:b4:14:38:63:b9:fd:28:a5:f4:5c:d8:28:8e:83:b2:f7:b3:
07:a3:c2:63:90:8a:52:df:a6:03:b9:52:c6:22:47:39:8b:4c:
f7:92:bc:5b:28:ae:65:d0:92:19:46:02:35:80:d7:7a:27:ab:
e4:cb:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:22 2026 by rpki-client