Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
File: -65NuTksgZMhr1EdxrK1qomYGfo.cer (raw, json)
Hash identifier: 4zyrEQKrjwPj6/wpsO62Xyk3NIjN4SEWojMQ2YgfJKo=
Subject key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0291D4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:06:39 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 203.55.122.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168404 (0x291d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:06:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:db:5a:00:6e:6b:66:59:da:c8:16:90:cd:
86:53:b5:6b:f5:5a:ec:7e:d1:b5:89:29:ce:d1:c0:
c7:49:60:dc:02:bc:45:8b:04:7e:75:11:94:3c:a3:
4d:9a:f0:48:ac:5f:8f:1d:de:ca:77:74:ed:00:c3:
b7:5c:f0:62:06:33:9e:8b:46:80:a9:1a:c9:6c:92:
56:47:e3:3c:f0:08:3c:d7:ee:8a:c5:3d:69:26:2b:
25:1c:88:48:76:af:03:e0:64:84:30:30:35:5a:f3:
2c:60:d4:3a:e0:e0:96:91:c6:ca:70:4b:9f:37:a4:
98:00:e8:9e:99:8b:60:8a:ae:42:db:33:42:b8:0e:
66:3d:02:9b:dd:89:98:c8:57:0a:54:c4:f6:28:92:
f9:0c:6b:ad:c7:99:92:f6:5e:72:d7:da:ab:8a:ce:
30:70:2f:25:96:b7:36:5c:39:16:8d:60:e6:b3:51:
4d:c7:96:92:bb:ee:91:78:c1:a4:d6:04:88:27:b6:
bc:30:b1:04:a4:30:7a:4a:25:96:a0:76:5e:37:08:
4c:4e:b4:5e:aa:af:41:e0:6d:42:68:c8:70:67:a7:
64:7b:76:db:d4:49:df:66:49:1a:32:0f:87:bb:f2:
e9:ef:20:c0:3c:e5:9a:f5:5b:3b:25:44:7d:a1:e6:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.55.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:14:64:2d:fc:6c:0d:4a:47:af:92:2b:81:11:41:ec:58:b8:
24:1d:9c:a1:61:98:c5:a2:cd:09:b1:d1:6a:23:27:53:15:54:
71:11:f4:ea:31:eb:ad:d0:84:d8:31:9e:4b:e9:22:ef:99:c4:
76:06:5a:9e:09:25:3c:16:1a:f0:7a:42:56:0b:a4:25:0d:47:
60:59:e3:a5:ac:f2:a1:b6:e2:dc:43:52:cf:de:a0:52:3b:99:
6d:2d:98:36:2b:12:dc:f4:5f:ee:f7:de:a4:3f:c0:c3:b9:79:
99:2c:e7:86:30:b0:70:5a:0d:96:3f:4b:f9:17:e4:b4:e4:6c:
e9:b3:13:5c:92:29:95:ca:ef:46:27:b7:c1:d1:a6:07:1c:d8:
67:2c:5e:0f:ac:5b:3f:38:37:e5:58:2f:0d:aa:6f:c2:63:7b:
dd:e0:5f:3c:4e:21:68:47:06:07:07:00:7c:c4:9d:94:c7:db:
2d:75:44:8a:b9:a9:c9:6e:9e:56:3b:d0:6e:71:38:c4:44:7d:
cd:b2:d9:ce:0f:ea:42:06:3d:b3:49:49:23:1e:00:90:e1:3e:
34:ea:64:68:18:9c:45:55:96:4e:cb:19:2c:8e:7c:d0:b6:45:
22:91:60:2f:2d:77:25:17:bb:08:05:ac:a4:d9:58:65:0b:40:
65:a7:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:06 2026 by rpki-client