Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
File: m8SNrBAOdU7o4cpqupQk4z013mo.cer (raw, json)
Hash identifier: DAx7UlAvMbUwqFlgbX2D8PwGFIpgUqf+UohgpZy64Zs=
Subject key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4927
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:05:36 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 177.210.0.0/15
IP: 191.214.0.0/16
IP: 201.5.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18727 (0x4927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Feb 27 03:05:36 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:34:fb:16:8c:cb:ed:05:df:4a:8e:80:a4:
a4:fd:e3:00:f9:95:5f:1e:46:bd:48:60:3a:f3:cd:
bc:5c:c4:07:8b:48:8c:6c:e2:51:18:21:1e:51:e9:
c8:1d:31:dc:44:1c:ce:cc:e1:e3:15:93:d8:f6:dc:
4f:02:21:d5:ca:35:9f:c8:77:e1:d7:b3:05:fa:f6:
77:90:fe:0d:53:af:1b:83:7f:3d:98:1b:d6:e6:9f:
99:43:0a:73:34:1b:f4:b5:2b:22:e4:cf:ec:7a:72:
34:0d:26:8d:9c:5e:b9:03:f5:a5:c6:fe:88:37:64:
a6:6d:26:2b:63:88:40:b5:7f:5d:dd:91:88:d8:26:
b2:50:8e:81:d7:97:5d:ef:78:c1:c7:bf:35:df:60:
b8:2b:14:16:2e:42:6c:2d:4b:0c:c3:89:39:5a:9e:
d5:99:9f:92:88:41:34:85:50:6b:e3:2f:44:f6:c1:
9d:dd:e5:0f:a7:ed:43:f8:1d:64:fd:c8:40:3a:c5:
99:1a:ef:32:80:77:a3:9a:a1:96:bb:c4:4a:22:99:
4b:d9:30:e1:a9:4b:5d:3c:74:7c:6b:76:7b:63:53:
f0:e2:80:6b:98:b3:80:fb:09:dd:39:b8:69:c6:12:
b7:6f:67:0a:ac:49:b8:b0:99:a8:6d:60:f5:66:19:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
177.210.0.0/15
191.214.0.0/16
201.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:87:af:74:54:21:26:84:1f:15:4c:72:e0:fc:94:ec:9a:49:
eb:58:af:db:c7:02:73:7b:a4:a0:af:93:30:ce:38:20:0e:97:
ec:17:81:5e:01:7d:01:86:da:ff:84:e2:2e:e4:e0:70:f6:d1:
85:be:ee:6d:a5:78:cb:4a:4f:c1:ae:7c:8e:0a:a2:d0:93:5d:
09:69:ee:04:3c:ae:c0:39:aa:39:e6:e6:11:8b:d0:34:4c:6c:
cd:f9:d2:4c:c3:3f:66:c1:12:88:61:3a:f6:db:9c:68:c7:1a:
34:fe:b4:32:8b:fb:3d:6c:a8:d3:0a:cf:eb:88:fb:63:9a:df:
68:f4:99:3d:78:ee:b9:71:38:30:9e:49:5d:7b:bb:3a:25:78:
94:27:c4:c2:23:6e:be:01:a2:90:46:35:d2:7e:7e:00:ed:b3:
86:94:14:3d:8e:2f:04:48:97:43:66:cf:f3:a2:36:50:03:9c:
c8:1f:21:ce:35:e8:26:dd:e1:44:12:53:9f:dc:5f:5a:93:da:
55:8a:b9:ef:06:f1:a7:ca:ba:ef:57:8e:72:08:ac:83:b8:d2:
49:54:92:7f:2e:83:73:95:41:0f:3c:c3:a3:93:60:f8:67:63:
62:22:b9:07:6e:49:76:62:4d:66:be:fb:fa:b6:76:a7:84:5e:
08:dd:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:29 2026 by rpki-client