Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
File: -0cfhBMIntcBvatArmPHiPUmq28.cer (raw, json)
Hash identifier: qquY6EKQcUISpYDJ8SdNa8iKy1kFJx0sDidl6JGuUZQ=
Subject key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF63
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Aug 2026 12:37:43 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 10131
IP: 202.65.32.0/19
IP: 2407:5800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 20:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184163 (0x2cf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 12:37:43 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:de:af:40:c7:c5:9c:06:c8:8a:a9:d0:62:7f:
13:df:0d:e8:eb:21:dc:35:5f:54:4f:d1:bd:49:a3:
f6:6a:e8:e4:f0:38:af:09:ec:2c:b3:96:bf:38:f0:
ff:2a:9b:f9:76:84:9f:24:45:dd:51:ac:92:4e:c3:
28:22:9e:ec:b6:d5:55:03:4e:4a:e1:41:d1:c7:6f:
a7:ad:03:87:17:41:b7:5e:bc:38:75:fc:4b:81:4b:
56:e3:c7:17:ce:bf:e1:e9:c7:2b:57:68:0a:05:4e:
32:a2:e2:da:fa:4b:98:73:d1:b2:ec:44:34:80:ad:
9e:fd:77:fd:97:a9:c9:0e:0a:c0:e4:fc:f7:05:ae:
6b:c3:6c:c6:5b:a6:26:94:d0:4c:f0:e3:ed:96:29:
94:56:18:b7:d0:9f:47:94:7e:18:17:2b:88:6d:21:
5b:5b:e9:5d:74:57:71:87:40:44:94:a7:e0:30:01:
f4:b2:a4:00:a7:df:28:82:ef:a2:64:09:be:66:f4:
53:b5:6a:ab:a5:ff:e1:90:ac:b8:d9:ab:ac:c8:3e:
39:02:7e:f4:a9:18:88:78:94:39:ac:06:32:71:7b:
cc:3a:34:1f:20:62:2a:44:7f:66:c3:50:a3:80:4e:
b0:de:ed:00:e9:e0:62:29:18:f0:2c:70:57:33:0f:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10131
sbgp-ipAddrBlock: critical
IPv4:
202.65.32.0/19
IPv6:
2407:5800::/32
Signature Algorithm: sha256WithRSAEncryption
8c:e3:25:8c:92:7b:92:07:a6:62:2a:92:37:b7:ce:63:50:d9:
14:75:7c:76:de:a0:63:0b:02:d9:60:fd:3b:e6:31:51:26:c9:
7c:a5:54:b8:f5:b9:4e:ab:87:25:c0:b6:ee:59:a9:e3:09:67:
1d:f3:bf:76:35:98:e6:0b:45:6b:50:d9:9f:a1:8c:97:a3:3d:
6d:bd:1e:0b:16:97:26:d0:4a:f2:6d:5f:35:71:75:c2:37:56:
35:18:fc:d0:ed:a8:87:1c:ad:76:91:13:f3:55:38:a2:55:3b:
43:e7:b5:70:ca:bc:b1:d8:ba:fe:9e:f3:71:b2:82:32:4b:dc:
a5:ff:e7:4a:c8:b7:e9:1d:aa:63:69:2b:e6:64:15:6e:80:4e:
7d:09:bf:37:f7:26:6d:c9:8f:41:06:c6:18:79:10:f8:e1:d0:
2a:ce:47:5e:57:ab:d9:57:ad:20:28:f7:8f:aa:10:94:4d:cf:
1d:5e:78:3c:bb:4c:8b:22:e9:b2:ae:6f:16:5a:58:8f:09:fe:
f3:34:42:ed:61:3f:89:88:97:e4:5e:38:21:d1:e2:94:47:11:
54:7b:d7:40:cb:67:ae:e5:d4:2e:77:6f:a5:3d:d5:43:4f:0a:
96:d0:d7:be:5f:22:94:b3:6a:63:5c:9b:33:cd:be:4b:79:18:
45:29:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:20:56 2026 by rpki-client