Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
File: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer (raw, json)
Hash identifier: 0Y+mgFP4SJ1ggAXHNDSu92Kzlu3s/eROSdJtxagCjpw=
Subject key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7B0D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 May 2026 10:17:25 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.94.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31501 (0x7b0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 7 10:17:25 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:ba:6b:26:0b:a1:ce:12:a6:9f:40:fb:df:
1f:8a:b1:15:bd:fd:54:89:8e:bc:45:9e:2b:f6:40:
98:8b:37:7b:08:3a:73:7e:a8:1a:27:a8:51:2c:09:
03:03:99:cd:8e:46:4e:17:5e:d8:cc:b5:9c:32:f7:
ff:65:12:1e:37:5e:d5:62:6a:ac:d7:ae:ba:c3:f3:
7b:90:02:ac:64:7b:ef:88:a5:00:ac:c0:17:1d:b2:
51:86:f9:69:7c:4d:77:33:a2:7b:4e:1f:0a:eb:c9:
b5:af:2c:0b:fb:9e:0e:fe:28:05:e5:75:b0:c1:2d:
23:dc:11:45:b2:d3:e3:57:22:59:9b:8d:41:5e:70:
8a:e8:bf:9b:3f:7e:4c:d4:f2:1f:c8:e3:19:18:55:
8a:21:17:52:8c:fb:e4:75:1d:33:7c:78:2e:e8:5c:
0b:71:d7:3a:a7:5a:4b:d7:b8:37:c3:f5:97:93:7b:
7b:51:c9:5c:3c:66:47:d9:a1:48:46:cb:6b:84:a8:
ed:72:3d:76:34:1c:2a:a5:dd:43:7e:22:9d:4c:a9:
ef:d3:4d:35:5d:f5:56:02:3b:65:c9:a3:c8:d0:db:
e9:5a:46:b5:27:36:a7:c9:01:22:e6:81:28:80:e2:
67:34:e7:23:17:70:b8:db:36:ee:43:5e:59:74:3a:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.94.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:f1:45:50:7b:c1:51:4e:d6:17:16:c2:1a:4e:bd:d3:60:3b:
ef:90:0e:2a:34:86:78:47:bc:96:26:93:de:ac:2d:10:77:cf:
d8:d1:a8:1d:80:2b:ff:32:a6:3f:7c:cc:43:f5:9c:f8:30:a0:
36:7d:04:f9:94:1c:53:9d:c8:16:2d:61:0b:7b:8b:db:09:b1:
f0:dc:fa:55:a3:03:5f:01:3d:9a:cb:49:89:2f:42:d9:95:97:
6e:f7:f6:2e:42:c1:23:bd:1b:5d:58:9d:b5:3a:a6:92:8d:7e:
2f:29:9e:59:44:3e:78:c2:73:c9:06:05:96:11:a4:f5:7a:d2:
e8:31:19:2c:83:a0:7e:18:de:2d:d3:24:13:67:f0:17:a6:29:
5b:6a:b4:bd:60:d9:df:58:cf:3d:f5:76:84:ee:b3:74:b2:c6:
4e:df:0d:39:1f:ff:09:8f:57:88:d5:15:04:60:8d:0b:c2:b9:
7c:30:f0:c2:09:de:5f:11:e8:b9:fb:9f:d5:56:a7:52:d3:2c:
71:cb:42:df:17:e9:c8:ea:de:d1:14:36:1f:2d:07:a2:79:78:
f6:a7:62:7b:09:1b:40:ae:99:e6:71:49:28:66:78:57:09:82:
37:30:5d:a4:75:93:82:bd:21:91:da:5f:11:2e:df:f9:93:00:
6f:92:1b:8e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICew0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNTA3MTAxNzI1WhcNMjcwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFMDcyNzExMC8GA1UEBRMoRTQ5RDYzMjAxODY3QTkxRkIyRTk5NTAw
MkE3Q0NCNTNGMzQxRTc1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKtzumsmC6HOEqafQPvfH4qxFb39VImOvEWeK/ZAmIs3ewg6c36oGieoUSwJAwOZ
zY5GThde2My1nDL3/2USHjde1WJqrNeuusPze5ACrGR774ilAKzAFx2yUYb5aXxN
dzOie04fCuvJta8sC/ueDv4oBeV1sMEtI9wRRbLT41ciWZuNQV5wiui/mz9+TNTy
H8jjGRhViiEXUoz75HUdM3x4LuhcC3HXOqdaS9e4N8P1l5N7e1HJXDxmR9mhSEbL
a4So7XI9djQcKqXdQ34inUyp79NNNV31VgI7ZcmjyNDb6VpGtSc2p8kBIuaBKIDi
ZzTnIxdwuNs27kNeWXQ6hIMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTknWMgGGep
H7LplQAqfMtT80HnWzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTA3MjcvRUU0NDQzQzI0OUZEMTFGMUEwRjFEMTREQkQ4MzM3NzMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUwNzI3L0VFNDQ0M0MyNDlGRDExRjFBMEYxRDE0REJEODMzNzczLzVKMWpJQmhu
cVIteTZaVUFLbnpMVV9OQjUxcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaIEXjANBgkqhkiG9w0BAQsFAAOCAQEAS/FFUHvBUU7WFxbCGk69
02A775AOKjSGeEe8liaT3qwtEHfP2NGoHYAr/zKmP3zMQ/Wc+DCgNn0E+ZQcU53I
Fi1hC3uL2wmx8Nz6VaMDXwE9mstJiS9C2ZWXbvf2LkLBI70bXVidtTqmko1+Lyme
WUQ+eMJzyQYFlhGk9XrS6DEZLIOgfhjeLdMkE2fwF6YpW2q0vWDZ31jPPfV2hO6z
dLLGTt8NOR//CY9XiNUVBGCNC8K5fDDwwgneXxHoufuf1VanUtMscctC3xfpyOre
0RQ2Hy0Honl49qdiewkbQK6Z5nFJKGZ4VwmCNzBdpHWTgr0hkdpfES7f+ZMAb5Ib
jg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:40 2026 by rpki-client