Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
File: 4lmIZ0880loTYNf-lTpYTxqvq8c.cer (raw, json)
Hash identifier: pw0iwUZ4FuTWhlPsnT29evXJ1u1/rIQvIg0WKNBaA7w=
Subject key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Apr 2026 17:00:57 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 45466
IP: 117.20.42.0/24
IP: 203.8.109.0/24
IP: 203.170.62.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174986 (0x2ab8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 17:00:57 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:9e:a1:71:72:a4:6c:c3:97:8d:3d:16:59:
45:04:4d:46:6e:f2:ec:f8:ec:24:7c:06:49:f6:55:
50:d5:01:af:2a:64:49:d6:bb:12:b4:18:8d:1f:ae:
f4:af:e8:8a:7f:98:b5:a1:85:66:df:8a:16:10:75:
fb:40:eb:14:62:fd:eb:6a:70:93:e5:f4:18:39:00:
85:61:3d:d8:27:37:42:43:8c:ca:18:31:9e:0a:4c:
33:ad:25:64:43:77:da:a2:4d:e9:ec:e4:17:ea:2f:
dc:c7:e0:1b:97:6c:aa:5f:46:c7:6d:f9:17:76:a6:
fc:27:c8:cb:7c:0d:4e:d5:93:de:31:5d:36:88:29:
e0:2d:d3:3a:36:ef:10:df:63:9b:1a:e2:c5:ba:45:
a6:0c:64:8c:a8:8a:ea:6a:b5:a6:86:a1:ad:78:2d:
91:ac:9c:87:fc:63:ff:9c:81:e7:fa:92:42:aa:6e:
ca:cf:60:85:4b:06:87:d1:78:7c:d8:31:59:6a:55:
fe:65:12:34:28:73:05:d4:f4:ae:f4:9a:10:b7:3a:
b5:53:44:b0:3c:01:d9:00:9a:50:15:d3:db:f9:7e:
c7:ff:14:ea:26:31:34:da:0d:32:8e:71:28:51:b4:
37:13:69:1a:c6:0f:f8:c2:0c:6f:8e:c0:3b:2b:48:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45466
sbgp-ipAddrBlock: critical
IPv4:
117.20.42.0/24
203.8.109.0/24
203.170.62.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:56:49:e1:70:be:9f:5b:48:bc:24:8d:d2:48:ab:bd:33:7a:
0c:20:37:58:f1:f9:08:bb:2c:ea:bc:df:e7:be:29:f1:6d:b9:
51:9e:29:ff:81:90:f8:df:d7:a6:c2:23:74:8c:7c:b8:10:78:
87:7c:86:26:55:6b:b8:c4:b6:3c:12:c9:e7:30:8b:6b:c9:1c:
6a:05:f3:38:bb:33:b5:07:00:29:5e:1a:0a:1a:30:0e:21:ca:
24:b1:83:ea:d1:9f:2e:64:f7:a4:b0:cd:2a:dd:92:b2:17:2d:
30:7b:69:30:13:df:aa:2d:bd:bd:95:de:61:de:87:9b:aa:e6:
d9:5b:8c:a6:2c:6c:ca:a9:01:55:a5:93:27:7f:8e:40:ab:28:
00:f7:25:61:08:b4:a0:eb:e3:82:77:7e:b6:f2:bb:09:c8:a3:
9c:e3:8c:d6:5d:0c:7b:85:66:28:e4:53:37:54:cb:1c:bb:b8:
72:62:6c:16:75:91:59:e3:b7:33:be:08:48:3d:8e:b8:b4:df:
0f:a6:ca:03:e0:51:e2:a4:87:90:d6:43:ba:46:ae:60:7a:aa:
14:06:8d:f1:64:76:b3:68:34:8d:67:4c:f2:f5:3f:a0:fa:56:
84:af:78:a0:fa:be:05:f6:c9:0a:23:39:73:1b:81:e7:e7:28:
85:ed:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:06 2026 by rpki-client