Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
File: 74sS4pnzyE0UvzVyXwLdxQOxLgE.cer (raw, json)
Hash identifier: FUubIufvt1OHUhZsDv024i7Auc+TByKZF2+QIuwEL3g=
Subject key identifier: EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029979
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:44:21 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 103.95.180.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170361 (0x29979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:44:21 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91EC978, serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:99:28:29:30:69:22:52:fc:71:16:f2:a0:
7d:fc:96:dc:8b:28:03:14:48:c5:87:96:5b:d1:9b:
bd:dd:1f:ee:2d:7d:44:ff:18:95:45:a4:af:7b:75:
d2:23:53:fb:56:86:99:0c:d0:3c:de:2b:62:e7:d2:
0b:07:63:7f:2e:f9:aa:cd:95:e4:bf:36:ba:1a:21:
24:26:86:82:ca:ab:99:77:18:3d:a9:ac:9f:e6:e2:
33:3a:39:bf:57:41:10:12:60:55:44:53:6f:d9:b1:
d1:c6:c2:ba:dd:ff:ef:3d:87:4c:31:67:33:97:40:
e5:81:13:9d:32:3e:d5:f0:0a:f5:00:47:84:ed:32:
0b:68:13:40:87:12:51:d2:d7:87:f3:93:d5:27:62:
e3:b4:a7:8a:25:ca:c8:d2:7f:18:b4:ad:e5:80:8e:
a3:27:aa:36:19:f2:50:5e:67:49:10:1c:a2:48:f0:
d9:4a:ae:a4:2b:64:ba:c9:14:73:55:54:2f:24:3c:
1a:f1:3d:c6:e4:a0:ad:69:b7:ee:9d:bb:07:4f:3c:
b9:74:91:01:8e:39:28:61:be:52:a4:14:60:cf:35:
4f:60:5e:92:62:ab:80:76:d2:f1:4d:04:9d:69:8e:
9f:c3:4b:3c:fd:79:a2:43:89:c1:c1:2d:17:f0:0e:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.180.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:24:f9:5c:2e:db:01:ee:25:7f:20:df:21:60:5d:b7:8a:54:
5c:79:0f:1e:fc:30:6d:c2:74:93:b2:de:f1:e7:84:44:94:42:
f0:68:4a:e2:5e:27:39:51:89:ed:56:33:7b:a3:71:42:3d:b0:
94:de:ae:41:21:88:a7:cd:d6:fa:69:2d:f7:46:d1:fb:97:a0:
54:0a:d4:52:3f:a1:27:6c:a4:ef:36:82:f8:ca:04:8f:6e:83:
95:bc:8f:ae:f7:fb:b8:0d:f0:5b:67:61:be:05:3a:e4:cc:62:
b0:20:6e:c8:81:a4:8a:64:a1:1c:ee:f0:57:1b:36:5c:b1:2b:
7a:61:cc:ba:32:c0:5b:84:b8:38:5c:62:66:df:86:9c:80:80:
be:1e:40:47:83:8c:89:f1:6b:ec:3b:bb:0e:db:c9:b1:16:01:
7f:c2:be:b7:40:7f:b7:20:70:cb:3b:f3:9b:d6:88:0b:14:c5:
ea:ba:8a:4d:54:98:49:62:a1:39:07:8b:2e:67:5f:1b:73:d8:
f3:78:03:cd:2f:6e:c0:d3:b4:e7:ab:de:2b:01:1d:33:35:e7:
02:51:32:91:87:14:b8:b0:4d:24:58:5c:8b:1f:ec:18:ec:1a:
1f:0d:19:da:6d:26:82:ad:4f:a2:16:38:7d:af:d8:31:0e:14:
ea:95:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:13 2026 by rpki-client