Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer (raw, json)
Hash identifier: ZRYdSrzV4/wmKQcyH3xsgyugtGG/H3xBPfSCFtyV534=
Subject key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5203
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 14:51:42 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 80.249.0.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20995 (0x5203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 3 14:51:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:16:60:3d:0f:82:da:d0:a7:5c:a8:8a:c2:
dc:20:e6:63:3b:14:7f:f8:94:c7:37:84:1a:a8:6c:
53:d1:3d:74:e0:1a:f2:ec:ed:c8:9e:ce:84:39:c2:
29:f9:d4:c8:15:b2:b5:c1:d8:85:68:c5:95:65:1e:
86:e3:5c:98:aa:77:5e:68:da:db:90:ad:47:71:5a:
1a:08:56:9d:c9:00:65:0b:10:65:a2:28:8b:4f:8b:
c5:88:63:8f:0d:67:08:31:26:8b:53:d0:66:80:b5:
c1:36:89:8b:a8:f7:1a:ba:a2:2d:2f:b7:47:dc:66:
53:84:01:2e:11:77:0b:7c:a5:c9:61:e1:c8:2e:98:
7a:c1:a8:9c:cd:3f:e8:30:71:b5:c6:b7:90:2a:d6:
6e:d5:3d:59:5f:b1:2a:79:c2:b5:dd:52:24:83:71:
bf:a2:93:1a:5d:95:57:78:00:50:ff:4b:9e:ed:99:
62:ed:ea:ec:08:66:be:33:b3:ca:88:0f:21:3b:d7:
ab:da:20:37:5e:74:04:76:87:8b:ba:9e:27:07:b9:
9a:9a:b5:6e:7f:d9:bb:d7:ed:3b:bb:f4:9d:c4:dd:
4b:7f:b5:9b:52:f6:d0:34:9b:20:43:42:76:ac:b6:
69:26:ce:71:3c:bf:ac:70:49:4d:49:98:58:66:c0:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.249.0.0/20
Signature Algorithm: sha256WithRSAEncryption
79:50:f3:64:61:0e:98:df:61:dc:77:3a:88:ee:20:cf:58:ce:
41:ab:41:7e:05:cd:d9:24:9e:9a:09:88:10:ae:e3:ee:30:2f:
5f:64:44:df:2b:4b:66:82:ac:9b:4b:f1:ce:8c:5b:17:28:13:
2a:3e:33:79:00:f7:bd:26:57:50:0d:48:2e:b4:54:64:29:b7:
d3:c8:4a:ba:6f:c6:3b:46:88:87:a1:fe:b0:3c:9c:a4:fc:69:
85:4e:f3:07:84:44:af:a5:13:e1:68:52:d1:f4:42:47:c0:37:
76:33:db:85:01:6c:36:85:4c:e5:ec:21:61:67:ed:db:e9:00:
24:8c:ea:b7:20:dd:1a:8d:cd:17:bf:09:cd:ce:42:df:cb:98:
77:dc:be:9e:17:c6:4c:c4:bf:33:cd:29:57:8f:47:47:8d:52:
dc:b4:32:79:8a:e9:c9:15:91:3c:6d:4f:e0:39:29:36:f8:3e:
cf:ca:0c:44:35:36:44:93:ec:cb:c5:76:30:0b:4e:0d:a7:fd:
59:c3:25:c1:ab:7d:61:dc:d0:96:56:59:de:8e:d8:96:93:99:
cc:b6:ab:66:2d:04:eb:70:ce:b9:e2:72:e6:37:19:dd:c3:f1:
2f:02:a8:3f:30:39:04:1b:9f:d3:d9:b4:ac:7b:c0:2e:71:b8:
d5:59:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:26 2026 by rpki-client