Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
File: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (raw, json)
Hash identifier: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=
Subject key identifier: EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4B19
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Apr 2026 14:02:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 154.8.124.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19225 (0x4b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Apr 29 14:02:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91A45C3, serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:ea:62:2c:f3:7a:ca:dc:6a:92:cc:8f:a9:
12:e4:f2:95:ba:e7:c9:29:39:ab:20:4d:b1:19:e6:
f6:18:b4:8b:b5:f7:cf:38:55:40:71:d1:57:54:af:
7e:74:ac:74:d0:a7:39:d5:5c:6f:b5:da:c8:6d:88:
fb:b1:96:f7:8e:55:0a:62:29:e6:d2:18:83:8b:f0:
a9:b1:e8:c7:5f:86:69:37:0a:87:94:ad:02:f7:8a:
02:2d:0f:b7:2a:08:cf:21:54:c6:4d:b0:24:8a:9c:
4a:bd:77:bd:72:51:f3:ba:29:81:78:8a:5e:27:9f:
4b:73:97:06:7c:ef:26:a8:8e:30:fb:3e:15:4e:d3:
7e:af:cb:e1:ac:e3:a3:45:56:8e:1d:07:52:5a:b5:
54:4f:3f:4e:39:3e:6d:ad:d2:be:21:9c:83:2b:7c:
da:ec:16:ba:11:4a:a2:2f:1f:1d:10:af:6f:11:18:
a9:76:68:43:66:72:29:fd:e9:6a:31:67:bd:97:09:
f8:65:a7:1f:90:25:2e:76:75:b6:6e:c5:92:05:7f:
f9:b8:b6:08:13:95:5a:18:ad:4c:18:4c:11:32:5c:
b4:17:8b:c8:df:49:86:c7:81:28:26:70:bb:23:b8:
12:df:4e:04:f3:f3:00:ac:f6:6c:15:d3:0a:80:55:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.124.0/23
Signature Algorithm: sha256WithRSAEncryption
12:b1:8c:04:c6:fd:93:20:ad:d6:3e:88:d0:50:ed:74:26:74:
8e:bf:fe:d8:52:21:ff:2b:ac:fc:c2:c6:16:f6:d4:a0:6a:14:
15:e4:06:7e:fe:5c:05:0e:e0:8c:7c:1f:9b:de:db:b4:da:ec:
8e:af:2e:83:34:bb:54:11:a8:f7:61:dd:81:84:d0:bc:fc:12:
97:38:e0:ee:61:83:7e:41:d1:45:0d:b8:ca:26:97:af:4e:0b:
84:91:3e:d9:9e:98:2f:a5:0b:e4:98:f4:68:4b:ed:7d:db:8e:
7a:c8:72:26:fc:22:91:67:31:2f:48:f9:5a:a5:2d:26:d3:0b:
2e:88:1b:79:49:ac:29:2c:a0:86:41:cc:7a:de:0a:66:39:ba:
18:1c:33:08:45:a6:ce:8e:f6:d6:8c:ec:2c:44:04:d2:d8:2b:
cd:ba:64:26:db:49:0a:3e:a8:d9:ce:bf:64:53:3e:68:e7:66:
50:37:30:24:da:cb:ff:60:48:b7:28:14:02:7b:6d:c2:05:b4:
a3:35:96:65:16:59:9f:10:2e:3a:0e:2d:38:d7:ed:ec:04:25:
6e:2b:3b:91:5e:40:f3:e2:34:aa:c1:52:72:97:11:ca:0d:90:
c2:fd:99:34:3f:82:fa:7a:00:77:ec:e0:8d:11:19:8e:31:c2:
8a:44:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:01 2026 by rpki-client