Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer
File: 9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.cer (raw, json)
Hash identifier: hdH7sDX99XvffdjED+qPHs23RnprFD8Uk6xqJy7se60=
Subject key identifier: F5:5C:AE:E9:FC:44:0B:73:F4:51:CB:16:7F:1E:C5:B4:D9:6B:32:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AEB3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Apr 2026 06:35:33 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 202.14.101.0/24
IP: 203.5.200.0/21
IP: 203.9.52.0/22
IP: 203.14.240.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175795 (0x2aeb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 24 06:35:33 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A918A331, serialNumber=F55CAEE9FC440B73F451CB167F1EC5B4D96B3244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:2c:af:91:e0:a5:5a:31:57:33:3c:a5:e8:
0d:2e:7f:07:50:32:4d:e9:ef:fe:18:98:18:6d:1e:
32:f7:a9:85:e3:06:94:bf:db:91:8b:6f:55:55:2d:
83:87:1f:4f:b1:a4:b9:95:4d:0e:0e:f7:58:8d:3a:
f4:b8:21:32:7c:88:3a:fc:24:65:cf:e7:8c:06:55:
90:58:ed:ad:90:24:e4:8d:a5:4c:16:30:f9:96:3f:
f7:ff:ba:96:eb:c7:2e:40:0a:c0:37:37:19:70:de:
3a:8a:5a:6e:f7:ce:6e:8b:cd:45:10:13:d5:94:d2:
29:61:8d:a7:16:39:cd:e6:36:e9:d9:41:6c:08:aa:
db:18:55:b1:6c:20:79:be:d5:7d:03:f2:9c:a1:f1:
ae:ab:44:f9:15:fc:e2:95:29:f4:70:dd:13:ac:f7:
16:fc:93:4a:33:37:d4:6e:b9:b9:2a:0a:6e:5a:5d:
16:31:0c:f8:b2:ea:f3:1f:ba:f2:8e:e8:db:e2:da:
0a:25:10:59:a9:0c:fb:69:30:40:08:42:98:32:37:
4f:74:42:6c:4c:1b:bc:25:45:c2:d9:a7:71:d0:9a:
2f:9b:58:02:a0:08:49:e1:35:df:05:ef:f6:a1:18:
b3:11:28:ed:ca:5d:06:06:41:5c:bf:76:a4:a8:9a:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:AE:E9:FC:44:0B:73:F4:51:CB:16:7F:1E:C5:B4:D9:6B:32:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A331/C96878EE3FA711F19573ADF2BE833773/9Vyu6fxEC3P0UcsWfx7FtNlrMkQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.14.101.0/24
203.5.200.0/21
203.9.52.0/22
203.14.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:6b:bd:53:da:74:e9:a8:d1:3b:e9:68:b4:1c:02:8b:f0:65:
fd:3e:4d:2c:67:b1:3e:6b:88:69:2d:0a:fe:00:a7:c4:d4:03:
7d:e9:51:d4:2d:d9:69:42:11:a2:99:0f:f8:a9:50:84:3c:f6:
3b:74:4c:08:4d:68:eb:63:bc:f9:a3:1c:92:21:59:dc:89:33:
8c:9c:0a:4f:71:e7:3e:91:bc:79:bb:85:eb:ea:eb:90:ba:54:
f5:2b:e8:45:66:54:ad:38:f0:4a:58:6a:16:f3:6f:34:22:30:
c9:23:09:3e:0c:4c:af:5d:a9:e7:16:f7:d9:8e:86:7c:f6:67:
56:13:36:b5:3e:4e:37:99:40:30:e8:c9:8a:fa:5e:15:5a:1b:
e6:e8:a6:4e:79:67:81:f0:a8:0b:a1:f6:77:a1:37:77:d1:88:
c6:79:89:48:81:df:99:9d:29:3c:a9:59:7a:40:e2:ca:eb:a1:
06:46:7a:57:74:e4:95:61:1d:e8:a9:03:96:1c:d7:45:e3:1e:
d6:1d:ff:bb:09:5d:fc:16:25:3d:45:ff:a7:91:79:15:bb:c8:
6a:9d:d9:41:25:9d:9d:4b:ff:42:c1:eb:78:47:b4:6c:82:30:
dc:7e:d8:fc:56:92:f7:26:57:f6:8d:55:30:9a:66:e6:7a:1f:
69:64:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:16 2026 by rpki-client