Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer (raw, json)
Hash identifier: Bmp5BL+brBHAH8NjAhPWWmoKoq8EOxt1pMgkovE4bkE=
Subject key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AAFB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 13:40:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 202.6.77.0/24
IP: 202.12.92.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174843 (0x2aafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 8 13:40:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9a:38:4e:e1:e1:d0:89:f1:e0:b4:57:2c:cd:
b2:e3:c5:ea:6d:e4:86:66:8e:4c:36:23:e0:28:69:
dc:2f:7e:13:fc:84:9a:cb:7a:11:d1:8b:d1:5e:20:
dc:bb:1e:06:05:3b:69:8a:10:42:51:2b:3e:63:43:
52:8a:6e:32:35:81:34:8f:b5:99:d6:1d:ce:b1:2b:
be:81:7b:0c:39:88:66:25:70:7b:74:63:f0:1b:8d:
29:82:18:42:68:fd:91:0f:9a:b6:41:04:39:d4:24:
15:c7:d9:f1:c0:0e:54:7a:12:39:a8:2f:4f:ac:b4:
d2:b8:1b:af:d2:37:7d:a7:dd:17:8a:a8:15:f8:70:
81:18:32:fc:28:78:e0:25:55:8e:f8:3b:99:cb:e3:
1e:29:b6:ba:de:e0:6f:57:1e:f5:c7:f0:ff:f7:ca:
c1:b9:7c:f4:99:68:36:cf:b0:04:67:58:ec:91:8f:
65:bf:56:3b:ea:25:df:39:d5:ef:c8:bc:64:74:2a:
c1:82:c6:35:74:57:89:4f:c2:8a:bd:80:c0:3c:4e:
5c:6b:52:0e:7d:75:5d:34:d4:6a:0f:f6:86:53:40:
db:d6:e7:e3:5c:e2:ca:75:16:0b:74:68:47:65:be:
94:0c:45:3b:80:c2:84:6e:c8:d6:c0:58:e4:7e:70:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.77.0/24
202.12.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:06:24:1e:7a:65:73:ae:04:f4:58:19:be:9c:5d:83:59:5a:
de:a4:2c:dc:dd:e3:13:a2:31:9f:cd:06:89:1c:64:33:51:11:
ab:22:79:44:56:c4:f6:c0:1e:8c:00:07:e9:de:04:82:4f:e0:
d2:88:21:21:74:81:2f:e4:92:6c:85:cd:5e:33:4e:e5:35:ab:
78:52:ae:fa:01:4a:a5:8e:fd:6d:09:dc:d4:ec:ce:6a:fe:76:
af:6e:09:dc:a9:6a:cf:50:39:49:72:12:a6:9e:30:48:df:60:
29:41:77:32:24:5f:62:90:6c:7d:73:33:e9:c7:49:1a:b4:6b:
93:57:cb:9f:2f:27:60:3b:0d:c3:68:93:9b:09:27:87:99:10:
09:0c:66:00:12:17:87:0f:b3:15:b9:46:27:ab:d4:8d:47:6c:
c5:c1:7c:c4:6c:9f:91:3c:45:a0:f1:6a:a1:e6:eb:84:c3:dc:
b9:96:ae:e2:7d:d8:61:53:ca:f5:74:1d:f0:bc:86:89:0f:ef:
21:f5:a5:51:81:4b:23:4f:8f:d4:f3:b9:fc:c2:c2:b5:d8:30:
33:74:e4:cb:0b:f8:c6:80:c2:57:93:b8:67:af:bb:3e:ae:28:
34:a2:c0:a4:c2:40:3d:7e:68:30:47:3d:fa:1d:af:a4:59:d6:
a8:da:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:43 2026 by rpki-client