Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
File: 6ZqAcw0LqQUR27LRx_XdTaylJdo.cer (raw, json)
Hash identifier: 5QJNv8RJUXFJJ7qHQosQR6PW4DuHJD2N0DYbtK/OGm8=
Subject key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB5B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Apr 2026 08:46:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.19.60.0/22
IP: 2407:d300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174939 (0x2ab5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 08:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:3d:7b:8a:fc:50:e3:32:14:6a:d7:69:cf:
92:57:39:55:23:f5:df:47:04:21:ba:50:5c:1f:0f:
bd:d2:29:1c:7a:40:f1:4d:55:7e:0b:56:b1:6d:34:
52:26:9d:f6:7b:0e:e4:73:8b:19:11:14:25:96:cb:
ac:99:11:8c:8c:36:5c:57:cc:47:b2:0b:63:db:f8:
d6:56:10:58:f3:40:99:63:07:29:c7:0d:a8:5f:85:
cf:6d:05:f9:46:bd:46:c3:b2:76:73:a0:f3:c0:a0:
a1:fb:0f:1b:54:2f:ab:b3:6c:71:3d:03:c1:55:2b:
89:a0:71:89:80:86:d8:d3:6c:be:df:17:eb:81:01:
0a:8a:4f:1b:88:b5:56:df:57:3a:06:1f:27:d9:bf:
75:08:9b:52:31:6b:af:6d:3a:e3:f2:91:7d:b4:07:
e0:30:f1:df:6a:37:f0:84:fb:3d:e9:82:23:4f:e6:
7d:f4:21:4c:0f:45:33:34:bd:ce:fd:28:dd:b5:cf:
91:30:57:5b:8b:40:cb:34:3e:72:c2:7e:30:c8:20:
7d:c2:9c:e8:7f:81:f0:64:e2:3a:c0:6e:b2:c3:3f:
f1:86:4e:01:93:d5:79:e9:62:f5:09:bf:21:9c:21:
da:b7:16:b4:4b:c2:a2:5b:72:0b:25:13:9c:72:19:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.60.0/22
IPv6:
2407:d300::/32
Signature Algorithm: sha256WithRSAEncryption
0e:12:fa:9d:02:24:1c:57:84:a8:23:8f:6e:af:f9:18:82:69:
55:bc:57:ca:b4:5a:86:2c:76:5b:20:a2:61:60:e6:2f:05:44:
44:2f:c5:67:95:16:b3:41:86:81:ed:98:6c:1d:49:3c:97:bd:
75:47:e8:1c:25:58:cf:e9:54:d3:ae:46:cf:fe:91:d6:c4:39:
62:4c:bf:ff:be:d2:ee:d1:45:a9:48:64:c4:e2:ef:5d:29:9c:
ff:bd:75:63:35:e4:f6:47:af:9c:19:c9:08:7b:86:b1:9d:c3:
66:fb:f0:d4:a6:81:a4:21:ab:dd:88:e1:f6:db:74:05:c6:01:
28:c2:8f:fd:3c:4c:3e:eb:26:8f:a7:c2:d2:09:26:e5:7d:e9:
2d:ae:b8:97:d0:69:b5:fa:15:9d:24:36:31:d9:2c:6d:4d:93:
16:15:28:1d:06:49:8f:59:5b:e7:e3:02:4c:c4:5c:e3:50:ce:
a2:e6:09:87:52:49:87:8f:91:f9:c7:61:d9:36:68:e2:aa:a8:
c0:0c:f2:88:9f:50:60:23:77:5c:69:4b:1e:d1:32:c1:fa:f7:
7e:41:90:c3:d7:a2:b7:27:b0:a2:5d:f6:48:e5:7e:5d:4f:98:
a9:d9:96:db:f7:f2:c9:a1:b0:54:49:14:b3:41:0b:b0:a8:c5:
bb:bf:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:35 2026 by rpki-client