Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
File: 556bUhJjfjPKXcthdpCc4ZYhumQ.cer (raw, json)
Hash identifier: aNCMD8l0AJMhFCXzmwDCDeUXZ0zz2bCnP2DzDZexiG4=
Subject key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 55C3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Manifest: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Oct 2026 13:29:32 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 91.208.208.0/24
IP: 91.208.228.0/24
IP: 91.208.230.0/24
IP: 91.208.233.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21955 (0x55c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 5 13:29:32 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:93:e4:82:41:e9:95:2c:5c:68:fb:48:d4:
d0:a2:e5:67:87:dd:25:93:16:40:ac:ee:5f:cd:bb:
13:d4:d6:2a:7d:28:8d:a2:61:d7:8c:0e:f6:6c:5d:
f3:61:6d:c2:97:5a:e4:59:54:aa:27:64:c2:ed:23:
2c:7e:bf:75:c2:b5:be:a2:8c:1f:f3:cb:a2:5a:8c:
db:5a:d2:08:6c:53:1c:da:a2:1a:be:6d:16:37:04:
bf:f7:42:bf:04:f8:fa:4b:09:56:7b:22:4e:a9:85:
8f:51:e2:ba:9d:6a:36:52:58:ed:7b:5f:96:b5:41:
60:a8:f3:2f:7b:94:d5:f2:01:0c:16:a5:c0:fd:6d:
2c:3e:23:1a:e3:c4:87:5a:2a:b5:75:5f:71:9e:0b:
73:26:22:30:ad:0f:ba:99:da:f5:71:70:1a:98:17:
47:70:55:28:d6:5f:20:44:92:a8:78:7e:db:7c:1c:
f0:2c:01:27:4d:bb:3e:28:d3:00:91:72:c6:75:50:
75:63:ad:fd:ca:a3:57:3e:cc:b2:4f:b9:47:9e:15:
da:db:eb:16:a3:3c:e1:98:2b:c6:57:38:64:66:87:
8a:58:7e:3f:9a:f9:f7:ad:a5:c8:a2:b5:be:38:56:
b8:3e:9d:39:e1:78:55:fc:8e:be:da:d7:34:6a:09:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
91.208.208.0/24
91.208.228.0/24
91.208.230.0/24
91.208.233.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1d:c8:d8:9d:31:48:17:d4:12:f3:b1:bc:3d:6d:3b:e9:58:
c0:84:34:fa:65:71:3d:14:ff:46:d9:64:c4:4c:6c:05:85:9b:
29:41:b4:73:ea:69:54:de:37:b8:2a:78:47:fb:d8:40:71:83:
54:48:36:64:ea:d4:5f:bb:14:a8:a7:b2:dc:6c:68:b1:1f:9d:
8b:13:a4:73:70:b0:95:ee:33:00:bc:40:ac:c0:fc:88:f2:ff:
62:35:01:f5:70:ee:54:e3:8f:c9:08:d9:31:36:49:cd:a1:81:
33:8b:e5:21:8d:b7:9b:ae:c5:0c:dd:00:e0:fb:8f:c7:f6:fd:
4d:d5:e3:5a:d1:f3:95:74:18:89:4f:08:a2:30:51:83:4a:21:
1a:09:c0:97:c3:2b:54:08:3e:31:67:cd:2d:e0:75:3a:7a:fb:
14:ff:4b:1a:66:ac:2a:64:6b:65:33:00:13:48:da:1e:a5:cf:
b0:f0:62:ea:bd:1a:93:26:a1:c3:86:7f:bd:30:a2:a3:10:7f:
66:86:f8:89:c4:34:03:ad:2f:77:58:e6:6b:7d:04:fb:77:5a:
36:2f:d3:cb:dd:b8:e8:74:6b:25:b7:fa:50:78:6c:06:bb:c9:
98:8a:d2:a5:17:e1:7a:f2:54:5f:6f:3a:93:b2:c1:be:88:85:
0f:ea:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:47:37 2026 by rpki-client