Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer
File: ssnrQPywE1ScqjXmpYC9mNr_DvM.cer (raw, json)
Hash identifier: IxBKPxL9Rdzhm0z8yoL0I+5V4EqvwfDJYN6uI1BTZEo=
Subject key identifier: B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5579
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 07:23:14 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.232.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21881 (0x5579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 21 07:23:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91F29DD, serialNumber=B2C9EB40FCB013549CAA35E6A580BD98DAFF0EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:e3:38:dc:74:03:13:a8:50:6b:9e:ba:74:
33:cb:e4:92:96:cb:a2:d2:ed:01:8b:05:09:2f:01:
d8:47:16:50:a1:7e:d5:c3:fb:89:f9:03:71:bd:ea:
18:f7:ac:ff:92:51:a7:d3:90:b6:64:6c:e8:b3:d4:
fc:be:a6:e0:36:29:03:bf:3e:58:49:fb:19:db:f2:
1b:ac:cb:3c:d7:b6:06:56:e2:05:f7:53:47:28:ba:
18:55:00:e7:95:dd:2e:99:6d:7d:3f:d4:38:37:8a:
a5:a9:5d:1c:84:73:c9:d7:bc:b5:5e:03:10:27:18:
32:2a:19:a6:91:86:0e:73:2f:e7:58:37:d1:d5:56:
75:a4:2c:f5:fe:56:76:ea:bc:ca:0d:33:9e:7a:06:
f5:1d:92:de:92:ce:92:b2:b4:42:d2:27:59:05:59:
ac:73:09:7a:91:0e:cb:33:bd:99:7d:28:78:b0:b5:
5d:79:da:4f:c0:90:33:67:fd:bf:0a:e4:2b:95:6d:
83:40:48:a0:ac:00:51:1c:7f:40:3e:9d:17:bc:12:
be:d3:7d:24:df:58:39:c9:f9:7e:b0:2a:1e:94:55:
d9:12:c4:8c:44:fb:53:cb:da:65:f4:74:d8:a3:f2:
5c:d6:10:b3:43:89:d7:79:8a:d4:44:e4:e5:c5:8a:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.232.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:48:87:63:a1:28:2a:22:8a:5d:d9:2b:15:b1:c1:7b:df:c0:
08:90:60:99:b5:56:5f:fd:07:ac:76:7e:ff:4e:14:81:d5:ee:
d1:87:ff:87:2d:f8:c6:01:48:8b:46:52:ab:2a:14:45:fc:b9:
d8:48:74:dc:28:7d:5c:23:b7:06:82:71:63:73:17:ea:fa:fc:
25:a4:4e:9f:8d:19:18:f9:fb:21:1e:ee:10:13:26:67:b6:92:
ec:ec:cd:8b:24:ee:ca:ae:96:24:e4:cf:6d:66:b9:76:d0:52:
ec:2c:29:51:cb:0b:77:d0:bf:bc:5f:df:6e:d7:c2:be:d7:11:
dd:2a:f9:3d:ca:c9:13:c2:68:67:20:e4:d8:0d:56:7c:13:8f:
84:1e:d6:d8:7d:f7:53:9c:1b:86:1e:1c:f4:d6:db:5c:e5:f3:
6b:50:cc:c2:a2:36:ec:a9:c5:84:70:1b:3c:3d:9d:6d:90:19:
19:82:87:b3:cc:4e:d1:ca:4c:64:1b:e1:e8:92:e8:a2:c0:4a:
a7:af:b9:6d:15:99:e3:69:90:e6:ad:2b:60:cd:fb:e6:51:38:
fb:f3:32:b2:fc:7d:99:d9:1d:fd:27:b3:bd:6c:3d:96:ed:c9:
1c:a1:d0:ba:83:f2:82:0a:e1:ac:7c:7b:f6:38:de:36:6f:0c:
d8:1f:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:11:28 2026 by rpki-client