Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
File: BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer (raw, json)
Hash identifier: AB/FEmgDWqpN/HRMdsBjjLMzwRdYbmlW1v7f6eODkcA=
Subject key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0297C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:36:39 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 43.226.16.0/22
IP: 103.45.64.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169929 (0x297c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:36:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:bc:a1:43:f3:ff:d1:9e:7c:98:8d:4b:c8:
ea:f2:8f:ed:36:89:2d:6b:ed:0e:76:e8:0f:77:99:
07:ce:c8:02:f6:c6:83:d8:12:4a:4e:1c:47:c5:e5:
4f:f0:60:92:ce:bd:12:f1:e1:0e:c4:fb:25:75:61:
10:af:29:cb:c7:fa:4a:7d:78:f9:58:c0:d1:a1:9f:
17:46:fe:e1:e8:a7:56:8d:40:3a:c3:01:78:5b:6d:
0a:11:5a:b6:f9:51:ad:d5:aa:a6:28:24:4a:2b:e3:
90:fa:c8:38:9d:ab:d9:90:2e:31:ab:13:bd:3d:dc:
f2:08:76:68:22:35:7c:48:7e:fa:d4:a3:87:6c:10:
12:8c:63:a9:a1:2f:3d:7d:f7:1d:f5:10:41:36:3e:
e0:86:8b:47:0a:c4:28:a3:80:4c:3f:83:b1:8b:d3:
e0:cf:6a:51:fe:90:af:c2:9b:74:b6:2b:d2:b2:8e:
ac:dc:14:50:77:b1:04:09:02:b1:39:51:e9:34:45:
4a:67:a4:71:2b:3c:f1:5a:ae:cb:d6:bb:30:ce:b6:
d5:98:7c:1a:ba:64:e8:c2:4c:45:90:6b:ab:62:1e:
0c:8e:89:5b:15:b9:3b:83:ea:57:48:96:76:f9:16:
a2:ee:53:d5:f9:25:6b:42:0d:06:a4:86:ed:e3:1f:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.16.0/22
103.45.64.0/22
Signature Algorithm: sha256WithRSAEncryption
be:e0:9a:41:24:d0:57:3f:ef:aa:20:40:e8:96:7e:55:81:84:
c0:04:a0:2c:f5:5e:be:3d:a6:3a:38:69:1a:77:95:a0:c3:3f:
b8:76:8d:94:cc:25:21:9c:c3:ab:1b:54:23:8b:b8:5e:82:7f:
de:74:62:91:48:9f:c0:25:2d:13:51:80:30:64:82:f4:e2:08:
15:10:17:75:07:12:ac:90:d6:a1:18:7e:a0:1c:e0:7d:d1:68:
bf:41:2a:7d:2e:4a:32:22:ad:9b:90:57:6a:5d:7d:c3:48:41:
07:0f:39:a0:a8:a5:e8:82:79:c7:a6:f3:0a:c2:f9:bd:14:b9:
6e:b2:29:91:de:89:be:be:5b:46:52:25:7c:87:bb:84:d5:fa:
29:8a:c0:35:ae:e6:f8:0e:b0:07:82:4d:26:78:84:30:f5:c5:
7a:ed:77:98:c6:8d:12:8d:34:8f:c1:4b:15:9d:5e:23:d7:5e:
8f:73:9b:5d:06:fd:95:83:c4:e9:ca:85:7e:39:95:0c:d0:bc:
11:80:33:4e:05:2c:ec:0b:f5:a9:db:58:26:a8:dd:5d:f2:88:
ca:7c:5f:31:7a:3f:7e:47:a0:6d:b8:c6:40:ff:f7:2b:b9:1b:
56:9c:ee:c0:f7:be:f0:39:49:38:ba:e3:59:18:b1:58:f9:c9:
ee:0a:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:38 2026 by rpki-client