Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
File: LZqjsNhdis2WNSgFXHSHpmkEyHk.cer (raw, json)
Hash identifier: pe0jPtbrea0IH+TxinlJaOZ3poZoVPiYrd4wBtFnkTk=
Subject key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 79FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Apr 2026 08:17:09 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 162.4.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31228 (0x79fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 21 08:17:09 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:82:32:8b:61:3d:91:aa:dc:02:31:47:1c:
c7:5e:f1:ed:44:cc:9f:c8:6e:2a:7f:d9:44:67:46:
3f:4f:bd:99:25:ff:f8:26:7d:e5:1a:f4:c6:c6:ec:
2f:a2:fb:f9:33:1b:01:b7:9c:22:2d:75:0e:92:0c:
8e:ed:3b:51:76:e5:1e:38:3a:45:05:77:79:9a:12:
0b:a5:f4:b6:0a:e8:ab:07:7d:3d:69:e7:fb:27:8d:
12:6e:9a:9c:7c:55:af:0d:a3:0b:ab:45:bc:8d:12:
ae:ab:6c:a5:1d:ec:8a:30:34:1f:13:4b:17:22:e1:
63:41:16:28:30:4e:a1:56:ad:c6:a8:49:71:21:2d:
69:f2:45:29:9b:32:65:60:41:59:25:99:45:0b:bc:
b1:d1:66:94:fb:c0:3f:60:49:42:fc:f3:86:3f:38:
6b:84:8a:63:02:37:56:f4:ef:a3:c5:8f:1f:df:bc:
2c:e0:01:5c:f5:99:96:2d:de:ef:83:0d:91:cb:95:
12:e7:f8:b0:82:fc:43:49:00:8b:2d:86:af:62:b2:
7f:e6:22:76:99:f4:b4:14:3f:a0:57:76:14:80:d0:
d3:ba:b0:c2:a3:f9:df:d7:49:f3:0b:b6:45:7d:ab:
87:a2:3c:fc:1e:26:32:3b:d6:9a:d8:de:36:09:28:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.6.0/23
Signature Algorithm: sha256WithRSAEncryption
48:69:fd:62:7f:e3:5b:fe:d8:eb:5e:ce:63:4e:cd:e9:7c:ce:
c7:a1:d6:72:56:66:73:b4:df:99:4f:8a:ae:81:f7:ca:ce:80:
cd:e3:73:21:60:ee:fb:58:ae:ea:b6:56:6a:5e:db:88:9d:fa:
84:43:ba:ba:90:e8:52:e0:3d:ac:f4:7c:d4:d0:4e:2c:62:59:
47:52:35:6f:b1:ac:81:af:9a:8a:cd:bb:08:32:99:5b:21:84:
f9:8d:bc:0c:ca:63:b5:65:39:00:6d:1d:3e:d7:7b:f4:c7:0d:
81:18:23:4d:8e:0e:3f:2a:f9:b9:bb:e9:20:81:d3:ee:6b:5c:
e4:4e:83:59:d9:b6:47:54:4c:48:47:42:38:10:e5:2a:e1:d3:
f0:82:c0:c0:cf:08:71:09:b5:de:9f:ef:33:d2:e4:76:70:4c:
b5:88:de:00:8d:25:da:60:95:ed:26:9b:09:85:7f:a1:64:a8:
18:7c:99:8e:76:99:1a:e1:bb:65:bf:2c:b6:e9:cc:d9:de:96:
97:b0:bd:79:ba:04:bc:f2:e8:57:1e:e0:2f:77:6a:9c:fb:1c:
a1:fe:18:2b:dc:25:ea:87:41:d2:06:8f:ec:36:02:0c:86:35:
f7:de:a2:4c:0a:46:ef:ad:1e:f0:dc:89:ec:c7:1a:92:e8:b4:
6b:aa:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:18 2026 by rpki-client