Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/52ijbgWHwyVfmjLZGP7HEPoEZRw.cer
File: 52ijbgWHwyVfmjLZGP7HEPoEZRw.cer (raw, json)
Hash identifier: q7L0EOf17ZFeO++Xv4VQq+flvAe5R/b4qPhP0fJf4FY=
Subject key identifier: E7:68:A3:6E:05:87:C3:25:5F:9A:32:D9:18:FE:C7:10:FA:04:65:1C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7A0E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Apr 2026 04:35:49 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31246 (0x7a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 22 04:35:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91C5911, serialNumber=E768A36E0587C3255F9A32D918FEC710FA04651C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:1c:b1:dd:a4:0e:98:38:4a:18:56:09:f0:
eb:6f:70:0f:53:4d:d1:cf:2d:ba:9d:95:99:2c:a8:
c0:2e:03:be:a2:53:8a:a5:dd:58:ad:7a:d2:a5:3e:
9e:cc:bf:91:05:c4:cf:a7:10:e7:9e:01:62:83:7b:
60:31:09:cc:55:44:42:9d:e2:08:4e:ec:7c:62:25:
e5:1c:7c:c8:30:b0:93:1a:d7:6c:e8:11:09:97:51:
d0:c6:b0:c8:3c:d0:c4:a7:b3:27:05:94:f0:8f:96:
09:2f:08:ba:ab:60:62:7f:6e:2a:b6:9f:43:12:e4:
35:c1:33:b7:d7:0d:12:53:f9:29:b1:88:fa:ac:e9:
42:fa:e2:34:c9:1b:75:93:07:d5:b9:3f:94:bd:df:
d9:cf:84:91:05:72:53:cf:62:8e:54:00:e6:1b:6f:
b0:78:ef:0c:3f:c1:bd:d6:26:ab:63:d6:57:ad:82:
1a:01:e1:94:77:9e:c7:bd:4c:fb:b5:51:a2:18:ef:
61:db:c1:60:a5:17:05:26:b2:50:3e:55:b8:05:d2:
25:8b:de:f1:c4:88:4f:5e:cc:a9:21:0a:36:cf:8f:
d9:b1:8e:6b:a0:d1:9f:a1:b2:e7:76:a9:3d:c0:24:
fc:ad:ac:75:98:6c:58:cc:1d:40:98:b0:17:c3:a5:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:68:A3:6E:05:87:C3:25:5F:9A:32:D9:18:FE:C7:10:FA:04:65:1C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.20.0/23
Signature Algorithm: sha256WithRSAEncryption
21:68:f8:1d:ed:09:8d:e5:68:fa:ef:43:3b:b5:2c:84:6f:b1:
f5:6f:db:75:49:13:c4:70:81:07:5d:c2:67:58:9a:51:23:0a:
01:78:95:ee:f2:44:cf:fe:02:dc:6d:1a:27:63:82:53:95:09:
f7:1d:1c:4a:85:af:7c:65:cf:a9:71:cb:c0:62:0b:1d:a0:36:
c4:07:c0:b4:23:88:c3:7a:ad:4d:8a:50:8d:d7:23:e0:22:61:
f1:cc:f7:ba:90:ae:39:72:b4:f9:4c:b8:43:88:01:a6:6f:c8:
14:f8:c2:b1:e5:2b:e1:ad:d9:95:a7:22:25:35:f7:28:41:b1:
15:9d:3f:9b:59:d8:ec:c7:d6:45:a0:c8:b9:7f:64:5f:fd:73:
0c:3c:5e:a9:b4:2e:0e:88:2b:fd:1e:29:d8:96:99:a4:42:e9:
a3:e2:cb:55:24:dc:b3:0a:69:03:38:aa:74:2b:dd:de:42:83:
c4:12:8c:35:b6:3d:fc:b1:3d:1c:e9:12:4a:e5:9f:ef:78:1d:
26:81:06:ba:7d:8d:e1:bc:8d:2d:39:57:59:89:90:64:2d:94:
40:a4:a0:31:98:dc:62:59:e1:54:f0:f1:c7:1d:2e:76:76:db:
3f:14:ec:0c:95:fc:4f:3b:cd:94:be:26:45:2d:e6:c5:92:d2:
07:3b:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:05 2026 by rpki-client