Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (raw, json)
Hash identifier: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=
Subject key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4AC6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 04 Apr 2026 13:21:13 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 196.15.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19142 (0x4ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Apr 4 13:21:13 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:53:2d:73:88:b4:40:34:89:4f:89:ec:a1:
95:4c:71:a7:37:98:40:99:d4:9d:62:a5:e2:d8:02:
2b:ff:b5:86:12:29:1c:0e:de:69:40:5c:75:2b:d3:
d7:ca:cc:b9:dc:3f:45:89:18:6d:ae:dc:59:ec:bb:
c3:80:0f:ed:8d:14:cf:4c:cb:49:25:9d:3a:3d:7a:
ca:74:6e:85:28:e9:92:5b:f5:61:84:19:9c:06:52:
6a:3b:93:56:28:bf:db:3f:47:60:a9:18:bb:78:ba:
91:a2:b1:81:8e:02:6f:10:01:83:72:48:f8:66:53:
c2:41:fb:5f:6b:2a:88:6f:8d:4a:a7:b4:be:29:e5:
41:83:fc:d7:12:92:23:d8:c5:d0:44:e2:af:a4:c7:
fb:d4:64:ba:3f:2d:16:c7:ca:5b:8d:59:f7:80:ea:
3d:17:5f:1c:13:bf:13:35:d6:29:ba:a8:15:b7:60:
09:c8:db:d7:ca:02:fa:ee:e8:a7:c9:26:d9:f7:cc:
95:fb:90:49:44:99:92:5e:d9:c3:13:05:64:16:bb:
15:81:e2:58:c8:06:69:fc:66:48:df:f7:de:ef:44:
a7:ff:f7:56:6f:34:db:5c:4b:ed:7d:d5:61:71:a9:
1b:c0:db:87:4b:3a:16:1a:40:74:07:0f:56:e4:a0:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.15.16.0/20
Signature Algorithm: sha256WithRSAEncryption
83:ec:53:00:cc:26:c0:1d:96:d2:c7:dd:e0:64:55:78:56:9a:
ed:33:92:cf:83:3d:ee:b7:97:c5:a3:14:f3:a1:36:f4:74:d1:
a3:15:c7:ee:92:9b:82:f7:8b:bb:f9:4b:15:00:c7:5d:3c:ab:
9f:29:30:72:2a:00:77:a1:4d:92:58:ec:17:da:c3:06:bc:d0:
90:83:cc:68:e7:3d:ae:d7:55:d6:b1:0f:2d:43:c2:b0:c6:76:
01:e6:ac:7e:30:15:22:77:50:70:f8:15:e8:6f:cd:6e:18:04:
ca:7d:b2:dc:c4:18:f8:26:2c:a5:87:30:ed:80:39:f6:a8:39:
93:68:cf:c6:a4:96:6c:a8:6d:ed:87:0d:59:dd:a7:0b:9f:b3:
c5:f1:d3:1f:31:f4:b2:bb:7d:e2:9e:30:91:21:8a:7b:e7:99:
67:c1:1b:79:50:ae:6d:55:4c:e1:f1:f1:dd:58:f1:0c:c3:28:
1e:be:a8:18:02:2c:f0:14:4b:ba:a9:22:c6:bd:b5:3c:83:79:
37:25:73:34:c9:52:00:ee:ed:0a:4f:a1:bc:72:60:f2:99:97:
91:6d:80:0d:9e:ee:12:0c:8e:7c:3e:2d:35:47:6b:58:0a:c8:
e9:a0:c7:83:56:dc:c2:67:79:d9:bc:c3:59:ef:26:2b:75:41:
07:2f:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:34:46 2026 by rpki-client