Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer
File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer (raw, json)
Hash identifier: QkrzPUipGlKEay4B5AxyIWKGwk4vKvqKYoW+XuMcQ+E=
Subject key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A919
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Apr 2026 14:52:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 43.240.36.0/22
IP: 103.19.188.0/22
IP: 2400:c680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174361 (0x2a919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 14:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:91:68:ed:03:26:4f:f3:52:3b:7f:75:7b:
bb:e8:f6:50:52:72:17:d5:b8:dc:9c:7e:6f:28:34:
f4:37:8a:08:fb:7d:7e:e2:16:1f:83:2f:fe:a4:96:
16:fa:fd:3e:54:cd:3e:a4:a2:21:db:12:d2:bc:c3:
30:d4:3d:c2:be:6a:09:fa:1e:ea:77:5b:5a:da:05:
25:4d:de:09:25:c7:32:21:41:d6:e8:9a:04:96:d1:
ef:8b:93:1d:b4:dd:11:b7:6f:d6:02:75:d9:69:49:
61:ef:74:a5:af:03:50:41:cc:c3:04:67:5e:fa:9a:
c4:1a:e1:4c:04:c6:75:89:b9:12:60:ee:9c:fd:b0:
55:3e:3f:7e:5a:8a:b1:2d:b9:7c:fc:a8:03:ad:a1:
ad:fb:f2:a1:83:26:70:96:42:1c:4e:b9:24:bb:3b:
98:14:37:cb:e9:b8:74:0e:dc:05:2b:22:38:40:19:
bf:5e:23:4c:49:fa:b4:b3:3d:43:9e:f6:01:49:6c:
80:a0:b8:6a:f0:e4:7a:ce:90:64:6c:4b:fa:18:2f:
6c:5c:ce:c0:c9:c1:f3:96:ab:c0:02:3a:95:e9:60:
18:d0:d7:ef:13:8a:07:6f:bc:81:f7:60:11:09:71:
cc:6b:d6:18:21:39:cb:9d:a2:2d:9c:7b:7e:8a:d7:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.36.0/22
103.19.188.0/22
IPv6:
2400:c680::/32
Signature Algorithm: sha256WithRSAEncryption
09:0f:1e:d1:d5:ef:c0:b6:6d:6a:59:4f:6c:91:63:28:78:fb:
dd:b7:fc:dc:0c:6c:d3:1d:83:ba:7e:41:4c:cd:41:40:f3:a8:
0f:f9:6e:5f:cb:3f:fd:c0:57:e5:f7:d9:bd:f0:f6:b0:0b:99:
fb:fd:11:8e:8b:4b:a6:9a:28:9a:da:7c:39:79:97:0d:ea:46:
45:f4:1e:a8:b7:4c:4a:5f:2d:4d:70:9d:e0:cb:bb:14:9c:b1:
c3:e8:35:a3:6d:08:b3:1f:04:2a:c2:f5:c4:d3:17:97:26:5d:
82:78:dc:3b:e6:05:e7:73:46:80:6c:e6:66:7a:00:da:4b:37:
77:20:44:a0:9d:b7:31:54:ed:69:6c:5c:23:e0:b1:3c:14:bf:
bf:29:a8:f1:37:11:60:db:2f:41:66:9c:94:5e:45:45:86:76:
fd:d9:a3:3c:ac:18:4b:71:74:ec:19:86:2c:79:78:fd:6d:c4:
28:16:3a:0e:55:c5:81:e7:5e:96:8f:0f:2a:d9:e4:45:2e:cf:
74:88:7f:22:48:ca:01:32:bb:c9:8a:82:e0:17:1e:b3:6d:ec:
24:ba:a0:ea:19:43:64:07:8f:e0:19:3d:9b:dc:20:45:ed:3b:
61:60:c3:bc:23:eb:cc:fd:0e:6f:5e:11:76:38:23:8c:62:73:
c4:30:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:16 2026 by rpki-client