
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.cer (raw, json)
Hash identifier: Vb6dlgPQCRT9QOa1RatbiAV3PyoDZPfW9U+m+vY8QVc=
Subject key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:15 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 202.44.145.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171783 (0x29f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:15 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:51:03:74:d8:ab:1d:05:8e:39:b8:9d:98:
29:ba:86:72:52:f6:b7:39:8b:0b:47:d2:07:d9:32:
31:50:97:0a:1a:b5:68:b2:61:a5:1f:83:fd:9f:c1:
e5:8e:e5:b4:c9:82:f0:23:c7:0d:4c:49:b5:7b:6d:
59:87:1c:7a:0b:6d:50:69:e3:83:cb:27:0f:34:a0:
d4:40:97:78:02:b5:22:7a:14:16:2e:3a:9b:78:42:
bc:7c:6a:a5:d1:cb:3e:3d:74:33:2a:eb:54:0b:5e:
ec:b1:6f:3b:69:88:b3:c2:71:62:07:81:87:1d:89:
8a:c7:d2:6e:1c:0f:23:06:de:27:f5:94:8c:b2:e8:
e5:49:20:07:b4:82:59:ba:6f:d2:c8:d8:d9:72:11:
d4:7d:36:f5:ea:1b:cb:1b:ef:67:97:bc:ad:54:79:
65:11:e1:1e:e4:d7:31:63:4a:f5:85:49:a4:c0:74:
34:c6:cf:00:ad:c1:dc:ed:3a:99:4b:17:d2:60:2a:
cc:06:90:0d:31:e7:35:62:2c:da:65:da:cd:5b:e2:
7b:ee:a1:02:5f:4f:a2:c1:97:44:1a:c9:32:fa:b5:
20:fd:1f:56:f4:05:f8:dd:a2:63:aa:5b:df:a2:96:
c1:dd:56:82:b9:03:81:3f:82:1e:e6:27:37:48:e9:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.145.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:45:86:eb:12:00:08:3e:4d:f3:c8:57:4d:1d:0e:aa:f5:57:
69:2b:19:8f:ee:a0:4a:2f:33:36:3e:de:4e:2a:b1:09:63:93:
0e:75:e4:e0:5e:8f:a7:11:7b:0a:47:8e:a3:e7:3f:bd:9b:7f:
54:89:93:c5:48:27:5e:1d:cb:b8:48:54:0c:86:14:82:45:78:
83:50:bb:e8:d4:4e:40:a0:f5:58:4e:a0:33:06:eb:da:2f:1c:
e8:9f:68:4a:7f:ec:52:a8:52:ba:46:ee:79:76:5f:c8:ca:40:
44:70:83:bb:03:81:f0:8f:73:b0:2a:46:8c:c3:c8:0c:f2:7b:
8c:a1:36:92:93:71:08:c1:61:31:a2:83:74:2b:13:94:60:5d:
56:1f:ba:24:0e:17:c7:79:b4:6a:ac:c9:37:0e:89:ec:96:ab:
7d:e0:45:a2:55:f9:18:6d:f2:b4:18:58:ff:88:89:30:77:44:
e3:b2:d3:75:f2:bd:ef:8e:8b:57:80:25:b3:4c:a6:79:c7:39:
6e:6d:88:74:c7:22:a9:dc:92:87:27:9c:e8:b8:ad:80:09:a2:
6b:dc:eb:8a:dd:74:5c:3a:30:3e:5f:a9:dc:27:2b:ba:47:35:
bf:fa:54:fe:06:4e:a5:58:72:1c:2c:88:4a:b8:80:db:b1:66:
dd:6e:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:41 2026 by rpki-client