Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
File: m8SNrBAOdU7o4cpqupQk4z013mo.cer (raw, json)
Hash identifier: R5q4mx+s9uEpcu2HtTPXgSdWbDKlsykJ60NOYm07C3w=
Subject key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4A0E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 May 2026 12:43:39 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 177.210.0.0/15
IP: 191.214.0.0/16
IP: 201.5.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18958 (0x4a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: May 6 12:43:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:34:fb:16:8c:cb:ed:05:df:4a:8e:80:a4:
a4:fd:e3:00:f9:95:5f:1e:46:bd:48:60:3a:f3:cd:
bc:5c:c4:07:8b:48:8c:6c:e2:51:18:21:1e:51:e9:
c8:1d:31:dc:44:1c:ce:cc:e1:e3:15:93:d8:f6:dc:
4f:02:21:d5:ca:35:9f:c8:77:e1:d7:b3:05:fa:f6:
77:90:fe:0d:53:af:1b:83:7f:3d:98:1b:d6:e6:9f:
99:43:0a:73:34:1b:f4:b5:2b:22:e4:cf:ec:7a:72:
34:0d:26:8d:9c:5e:b9:03:f5:a5:c6:fe:88:37:64:
a6:6d:26:2b:63:88:40:b5:7f:5d:dd:91:88:d8:26:
b2:50:8e:81:d7:97:5d:ef:78:c1:c7:bf:35:df:60:
b8:2b:14:16:2e:42:6c:2d:4b:0c:c3:89:39:5a:9e:
d5:99:9f:92:88:41:34:85:50:6b:e3:2f:44:f6:c1:
9d:dd:e5:0f:a7:ed:43:f8:1d:64:fd:c8:40:3a:c5:
99:1a:ef:32:80:77:a3:9a:a1:96:bb:c4:4a:22:99:
4b:d9:30:e1:a9:4b:5d:3c:74:7c:6b:76:7b:63:53:
f0:e2:80:6b:98:b3:80:fb:09:dd:39:b8:69:c6:12:
b7:6f:67:0a:ac:49:b8:b0:99:a8:6d:60:f5:66:19:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
177.210.0.0/15
191.214.0.0/16
201.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:e6:b5:77:69:a6:47:fc:56:c4:65:09:30:44:9e:c2:39:a0:
55:70:12:54:d1:1b:da:47:28:7c:f2:9b:1a:0b:0b:52:af:ae:
27:ee:d5:d0:9b:19:ca:26:d6:d7:7a:99:9c:bd:3e:08:49:ec:
05:c0:e9:b5:17:0c:81:a4:99:ba:4d:61:9b:fd:56:f7:a5:36:
df:04:49:72:22:35:a8:2a:9c:04:04:96:86:a0:64:ff:45:b9:
dc:11:09:1d:aa:68:a2:27:03:c3:25:de:df:d9:75:18:d6:fe:
a8:80:7c:bf:14:30:f9:5a:f9:f3:f8:72:c7:eb:10:f8:6b:4a:
a9:7c:54:53:e1:b2:16:7f:87:38:68:2b:07:e1:5d:e1:c6:19:
66:2c:05:df:13:df:2a:18:31:4a:be:dd:a1:22:a7:e4:d1:38:
e3:1f:c0:4e:46:c0:53:3d:ad:d6:56:ba:b7:6d:98:80:31:54:
e7:91:50:81:67:e0:1b:4f:93:62:66:74:c2:ca:43:1c:70:ac:
07:2d:e1:e4:c0:7b:3b:d0:a4:f5:3d:83:72:9a:6b:30:48:4a:
42:eb:da:44:78:f0:09:7a:be:1f:8e:f2:87:c6:7c:74:69:a2:
6a:ce:ab:2b:b7:9f:02:82:67:6b:d4:9b:10:29:11:34:1c:aa:
36:4a:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:32 2026 by rpki-client