Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.cer (raw, json)
Hash identifier: /39ZaY5C5+NwKm4Fh+E7KI/JbhbSDxYdPCvNiyxJ+9o=
Subject key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A045
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Feb 2026 12:35:06 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 135036
IP: 45.250.68.0/22
IP: 103.206.208.0/22
IP: 2404:4480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172101 (0x2a045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 28 12:35:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:5b:17:e4:df:81:36:6e:7f:71:12:57:60:
35:a4:2c:80:c9:72:d8:fa:b4:00:36:78:02:ab:f0:
cf:8b:07:cb:fe:8f:c2:8a:43:28:4b:86:20:43:2c:
67:8a:02:db:a5:ad:66:d1:d4:55:d6:48:81:51:5b:
85:08:1f:b8:d4:ea:27:f0:08:77:da:db:56:9e:84:
f6:26:e9:96:93:67:3b:90:a8:b2:fd:60:44:2a:b5:
ac:0c:d2:24:54:51:46:d4:e0:3c:c7:a2:46:16:0d:
d5:33:4a:3c:7f:5e:36:0a:88:7a:69:dc:39:80:ae:
14:74:c1:c5:89:57:58:1f:63:b9:b7:44:9c:a4:c6:
32:7f:4e:5e:50:8b:42:8b:37:3b:f3:30:ed:21:e3:
5f:91:db:9a:8d:63:78:9b:6c:fc:23:dd:13:ce:0d:
32:ce:33:5c:7d:80:81:24:39:ad:6f:e2:b8:56:dc:
23:e5:41:8e:a2:eb:8e:7f:69:f2:d0:be:3d:a9:3d:
17:54:b1:ed:f5:73:6a:17:20:a6:36:ad:8b:3d:37:
c0:b1:78:ba:c8:82:c4:27:b7:c4:cd:c5:af:e5:39:
70:d6:6b:07:e9:64:53:ef:a0:94:ed:ad:11:c4:17:
7b:f2:cf:b1:c9:c7:f2:d1:c7:c4:33:3a:97:a0:82:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135036
sbgp-ipAddrBlock: critical
IPv4:
45.250.68.0/22
103.206.208.0/22
IPv6:
2404:4480::/32
Signature Algorithm: sha256WithRSAEncryption
8e:e7:ab:a8:62:45:9f:3f:82:f1:57:16:10:40:00:01:6a:cf:
c4:2b:38:97:27:e5:d4:ed:0e:e1:cd:35:86:13:84:46:fe:93:
99:b5:8a:5e:52:60:4b:08:84:a0:1a:6d:9e:81:5a:5c:01:4f:
12:6e:f7:43:63:ca:15:27:b8:34:9f:c8:ae:5b:64:07:59:22:
f6:90:e4:99:83:be:4e:eb:cc:1a:28:9e:65:92:ab:17:a1:0a:
29:ab:2d:95:9c:f1:d0:5e:f0:56:1f:aa:23:0e:bb:41:57:76:
30:2f:26:82:33:f8:4e:6d:6a:69:ec:c5:0c:ce:3f:93:e9:ec:
48:55:c3:19:e1:1d:af:35:65:e2:c4:58:09:40:41:4f:b6:d4:
56:34:0a:55:f6:9b:2a:04:79:30:58:cd:c7:4f:d5:e0:41:43:
78:20:0a:11:b3:be:6a:b6:85:29:b9:77:80:8f:e9:7a:ad:06:
d8:ad:da:8e:26:cb:8c:ab:a0:af:3a:3f:a2:cd:24:00:f8:1d:
e3:19:49:11:b0:95:a5:b5:c8:fa:7b:8b:2b:3c:05:da:3b:59:
43:cc:89:07:61:64:cf:19:73:d2:68:0e:43:c3:da:ac:d2:c0:
c3:0b:a5:08:7c:d6:89:f4:04:f7:c6:42:41:78:98:4e:16:4f:
f3:58:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:12 2026 by rpki-client