Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
File: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (raw, json)
Hash identifier: 9g0d999WloLZl2Y8eVT/3PQyV06kf0W47UHGLmFv+Vo=
Subject key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 49AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Apr 2026 20:30:04 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 179.65.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18861 (0x49ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Apr 10 20:30:04 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:b9:e7:df:c9:c5:f2:56:fc:e7:c4:67:ee:
68:dc:2a:66:94:4c:07:26:94:8b:32:32:3a:62:b7:
d0:5b:e9:b4:d2:84:b4:68:40:ab:99:16:2e:65:7a:
4d:49:26:e6:16:77:18:51:37:3d:34:97:43:41:22:
a1:83:68:f0:8c:f3:91:e6:ea:9f:d9:71:bc:36:dd:
e5:60:2e:6e:07:dd:ce:08:34:a8:b7:a5:f1:51:f6:
1d:53:16:fd:f3:d2:a5:a6:99:8c:a5:fc:f3:08:24:
eb:a6:a0:07:27:b9:e0:7f:28:b5:90:4d:78:84:c1:
3e:4c:a7:1a:20:5e:76:e9:a9:ba:23:67:74:0b:57:
bd:ae:38:08:b4:6b:12:78:78:a2:a0:bf:ba:63:fe:
d1:a9:28:aa:3c:f7:fe:98:d0:fb:76:7a:01:29:8f:
e9:ba:e5:0f:49:a3:7c:c4:23:03:be:89:fd:87:37:
21:a2:58:cd:16:ca:cc:61:18:91:1e:71:f2:67:46:
e2:d0:bc:ff:5f:0b:64:62:2d:ce:aa:7d:b3:a9:d3:
ef:26:e8:1b:b2:c0:49:c7:ed:46:ef:17:81:47:a0:
33:19:f7:f2:51:0a:9c:ac:af:cb:59:43:cc:68:15:
0b:3d:b3:24:27:ac:e7:58:3d:9e:72:47:cf:56:1f:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
179.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:ca:29:e0:df:ad:f6:ba:ae:9c:a6:82:b3:a4:23:8d:26:8c:
52:a2:95:1e:ac:78:65:a3:e5:25:2a:a2:61:4c:6c:0c:77:88:
ed:b0:39:1f:94:d3:86:a9:96:7a:a4:40:0d:26:b5:bb:84:28:
5d:18:01:bf:40:50:4f:6e:49:e4:c8:c5:b5:ba:06:36:f5:fb:
20:74:65:70:bd:ee:e8:c9:5e:e7:5b:48:37:a1:d1:f3:f3:07:
96:1c:cf:12:cf:93:ad:b5:2b:81:f6:43:fd:0c:28:8d:c5:93:
32:f5:c5:60:42:e7:7c:94:4f:b8:47:fc:9d:f6:80:0d:c1:bd:
c1:23:1f:83:6d:2d:86:2e:80:23:65:4b:4f:5e:99:0e:e6:3a:
88:51:1b:44:d9:33:20:0b:ac:6a:bc:7b:e5:97:7e:71:91:39:
29:30:4a:e5:7b:79:7c:4f:52:b9:49:bc:6b:49:94:8b:04:77:
6e:70:f4:c4:b0:c3:32:af:6b:09:b7:c0:71:c0:04:05:dd:1c:
3b:28:e6:0b:70:d5:84:9e:a3:39:5b:9e:52:4a:86:61:a1:1f:
d2:67:0e:22:c2:6b:d7:53:2c:cc:99:bd:fb:8a:8e:46:e4:53:
dd:88:16:9f:25:1c:86:7d:54:f9:ec:a6:cf:52:2b:07:58:91:
f6:b2:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:38:55 2026 by rpki-client