Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer (raw, json)
Hash identifier: rqCl7wqZNji/4Er93QJ2Cdn2fjkkSyMZy35f1u1HeLg=
Subject key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B21A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 13:32:45 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.91.8.0/22
IP: 123.253.24.0/22
IP: 2401:c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176666 (0x2b21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 4 13:32:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:7b:71:7a:8d:0d:e3:c6:8f:e8:23:10:7a:
19:c0:af:9f:e8:b2:bb:17:2f:1f:c9:7d:02:58:71:
24:4a:a6:72:ea:23:de:86:76:81:bd:46:1a:3c:45:
16:4c:4e:90:c7:04:f5:47:80:36:94:3e:75:6b:ee:
bb:6d:65:43:f9:c8:16:c2:8a:a8:f7:f5:71:d5:54:
8e:b3:33:b3:cf:40:d9:a9:9f:54:1b:b7:01:e0:d6:
0f:c9:d2:2f:ae:5a:a6:74:e5:e7:03:16:ab:2e:ff:
e5:03:42:af:45:ae:fa:c3:88:2f:60:a2:fa:9b:21:
58:69:bf:22:1c:6a:4d:b2:dd:2b:d3:b0:43:d5:38:
64:4b:5c:3b:1d:07:ac:c5:bc:0b:6f:67:dc:80:65:
71:f3:0d:63:49:20:dc:3d:44:c8:ef:bd:52:2f:49:
97:95:3b:98:43:23:9e:54:e1:ee:e0:fe:12:d8:63:
e5:58:77:85:da:d4:d9:db:f2:ee:d4:78:59:a7:a9:
c0:0a:0d:1f:6e:e3:a5:73:b1:e7:86:73:68:92:a6:
3f:8f:64:db:2f:62:cc:ee:ae:bc:0c:93:ae:33:c6:
32:da:74:bc:ef:f4:4d:5c:29:ec:93:ec:aa:47:4d:
c0:08:87:f7:dc:aa:93:a1:07:e5:29:47:52:a0:2f:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.8.0/22
123.253.24.0/22
IPv6:
2401:c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:18:8f:e0:bf:ba:4c:a3:d1:cc:90:ae:d2:e5:98:ac:7c:7f:
76:68:80:6a:83:95:ae:ff:79:ab:5a:06:ca:bc:08:51:c0:28:
d3:63:03:bd:9d:5d:0c:69:e1:fe:c2:3e:e0:09:1e:ee:5e:86:
a5:d9:94:a7:a0:91:45:37:aa:2a:ec:29:2a:35:3d:96:ab:7e:
0f:b5:9a:e1:cd:18:fd:8f:bf:77:02:d4:8f:3f:2f:03:c9:58:
03:41:b6:61:63:25:ea:15:09:4e:8a:da:9d:91:f9:88:a4:92:
b5:c6:03:13:dd:a0:7f:8d:e3:b1:fa:83:ef:34:87:dc:f0:6c:
f7:95:1f:4a:2d:61:51:24:31:03:ad:47:eb:f7:94:43:4b:2e:
61:43:7e:96:f8:0c:cf:c3:fc:36:10:e0:44:d1:49:2f:79:dd:
f6:6f:3d:f2:73:c6:3a:72:0a:81:a1:80:6c:d8:f7:81:47:80:
af:09:84:a3:6f:bc:4c:4c:34:80:e9:e5:ef:1b:19:ba:c6:8e:
96:5f:4a:1b:21:80:b2:15:10:78:b3:3e:6e:43:a5:73:86:96:
75:51:64:bb:9b:99:0f:44:94:e5:c7:de:0b:0f:c0:12:a4:de:
a1:2b:9a:45:c5:5d:b8:29:c3:b4:85:b5:43:0f:0f:78:36:52:
de:d3:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:25 2026 by rpki-client