Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer (raw, json)
Hash identifier: f1wBWHbTH5s7MT1dwqLkSpp1KQ7P7W6Upw19ZwD66BE=
Subject key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8295
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Sep 2026 14:24:40 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 192.249.42.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33429 (0x8295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 22 14:24:40 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e6:89:46:c3:b5:15:5e:39:58:69:14:65:92:
0e:b7:51:ac:0e:3d:45:d1:85:40:46:c7:3e:b5:a0:
5f:43:cc:b6:d3:11:95:43:a3:39:09:6d:63:07:31:
b9:7b:68:95:7f:f2:4b:bb:88:11:e2:91:90:d6:2f:
e7:b9:8a:9a:ff:da:85:c5:0a:0c:44:93:d5:7b:4b:
ba:89:4e:df:5d:d1:4b:6c:f7:bd:7f:4a:74:1c:f0:
99:b8:ee:c6:f9:7d:82:42:6c:b2:b5:9f:91:a2:e7:
3e:66:5f:76:70:4b:62:1f:6e:45:bb:27:97:57:ba:
01:be:d8:d9:65:7f:57:c6:39:11:ef:d9:92:02:e0:
00:a1:b2:b5:d0:08:1c:42:36:8b:fc:71:be:db:90:
d8:11:fb:4f:83:c9:4d:ed:9c:7b:7d:b5:c6:e8:ff:
80:90:cb:d6:99:ae:8b:a2:7c:5b:cb:b2:06:0b:e0:
07:47:99:bd:ca:db:08:6f:b2:9a:27:ef:6b:fc:e3:
b0:2a:18:0e:96:0c:b3:68:30:39:de:1d:f0:57:77:
2f:ea:54:aa:84:8c:60:9d:31:af:e5:ec:17:8c:12:
87:a8:ec:92:8d:f5:d4:2d:a2:56:62:8d:65:dd:c0:
d0:b3:03:d0:34:95:a6:f9:3f:ff:b3:09:27:7d:e0:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.249.42.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:ca:b2:15:81:2e:18:06:44:0d:63:b4:6e:a2:83:21:9e:18:
7f:4b:a2:49:a7:52:77:9a:3b:49:13:28:d7:53:e4:c7:91:2c:
45:77:5f:d7:a6:cc:e9:c1:82:9f:4e:70:8b:70:04:06:23:e4:
95:1c:40:c1:73:35:22:8d:8a:1a:e3:a7:25:5f:e2:e0:95:84:
85:02:1f:40:0d:ca:d0:48:ab:15:ab:9e:32:d3:c8:9b:d7:e7:
72:0d:df:5a:45:38:43:7a:2e:bb:86:40:bd:09:19:b1:0d:f2:
7e:e2:6b:f6:00:18:1e:bf:f0:1e:de:2d:9b:d6:9b:af:6e:e9:
94:28:6d:22:32:83:7a:1d:f8:8a:8c:0e:a5:88:ed:0c:d7:48:
36:3b:9d:93:f8:72:8e:56:f1:09:e1:95:e1:b4:61:94:a2:5e:
f6:37:d2:be:f1:0f:29:23:0b:55:df:a7:f1:e0:e8:e4:6f:0b:
24:ef:03:14:f6:1d:20:6c:db:03:9c:85:87:3b:eb:52:ae:b9:
5f:d8:ed:3a:76:14:db:03:d6:f1:9b:94:02:b7:d4:1a:b9:d2:
9e:17:03:20:5c:65:84:b7:35:b0:16:bd:64:31:78:9a:7f:43:
80:f4:57:e5:a3:9e:ad:02:25:42:7c:73:e6:00:35:fa:43:40:
87:83:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:41:26 2026 by rpki-client