Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer (raw, json)
Hash identifier: UW2A+Zfkd/kijO+IT5IiVnNTDpDNLnYT+3cgx519su4=
Subject key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5262
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Mar 2026 04:14:20 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.110.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21090 (0x5262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 25 04:14:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:cb:43:ef:6e:62:b4:25:74:92:19:c7:ae:
76:aa:36:19:a8:78:bf:b3:37:71:9e:28:00:72:62:
58:b3:c1:5c:c4:23:0e:99:56:6d:25:5e:58:ba:15:
f5:1f:ae:42:5d:d6:c2:61:93:e9:42:3a:8e:8f:de:
da:ac:21:c5:e7:90:80:34:25:b0:87:5e:f4:5c:93:
e2:d8:86:42:11:3f:94:de:db:f4:e4:16:f8:0c:cf:
5f:e3:87:d6:43:b4:a1:e4:9e:ec:6a:f9:31:22:3e:
ea:0b:3e:e7:64:8a:4e:0b:75:a9:c8:a7:ef:76:ac:
15:72:66:59:bd:c2:85:66:28:21:3b:32:ab:74:80:
02:b3:e9:df:b4:36:d2:c3:7b:09:2b:08:59:87:21:
d6:83:87:57:3d:21:0f:90:54:d8:97:bc:f8:93:32:
67:b5:1c:63:47:6f:0d:fc:92:73:d2:6c:fb:9e:d7:
9c:a7:db:f0:fc:10:9a:8b:4f:30:c5:10:27:77:1e:
49:82:b4:83:ef:f2:e4:fa:f4:56:be:5b:09:58:ab:
dd:45:29:4f:6f:10:2d:42:1e:ec:fe:66:0b:cb:d4:
17:4e:90:55:c2:1b:33:5f:be:40:40:6a:b4:38:3f:
3d:d2:ee:3b:2e:5c:a9:ac:8f:65:07:80:73:dc:4d:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.110.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:1c:dd:51:fb:8c:49:86:f5:63:2c:04:eb:4f:2a:e8:72:e8:
a4:46:3c:af:b4:f2:9c:c0:ad:fa:01:44:97:21:a0:06:8b:95:
6a:68:26:4e:51:65:c6:f4:9b:2d:d3:c7:17:fd:b2:b1:59:a1:
69:6e:fc:30:d4:c4:43:d5:13:c6:c4:ed:e9:1d:60:fa:82:5b:
c0:f1:7c:51:4b:d9:61:26:13:03:75:cc:08:a5:1b:be:1b:63:
5e:ba:69:59:d9:c7:51:fe:24:05:ca:4a:e7:e9:b9:16:da:ed:
1b:80:7a:4a:b4:ff:2f:12:30:be:1f:d1:2a:a4:cd:5a:e4:f3:
eb:02:d4:c6:9b:de:9d:6f:20:69:6d:53:6b:ef:c4:c0:8c:20:
c9:70:ea:56:a1:39:d1:fc:eb:43:ee:d5:00:0b:5b:b9:51:22:
74:24:73:00:2e:6a:c3:bf:f7:f0:94:33:82:7a:52:6b:c4:68:
3b:46:aa:88:9b:29:85:ff:b0:b1:43:2e:38:a6:a9:41:5f:87:
0a:08:66:82:06:5f:cd:61:b5:d5:61:cd:5b:de:21:1f:b8:1d:
bd:82:fe:05:c8:30:45:5c:e4:27:1b:67:80:27:b3:e7:db:04:
38:5f:91:0d:bd:bc:43:6c:5a:1d:37:44:e7:f8:8e:d8:cc:44:
59:44:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:58 2026 by rpki-client