Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
File: C-AoY1W14laYjORU35P8D8p_YEA.cer (raw, json)
Hash identifier: CTIEcShpE+YFB2mdSehHXzcVwXfJzB1jfDbGCpTxX+Q=
Subject key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029E46
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:05:56 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.67.20.0/23
IP: 2001:df1:cf40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171590 (0x29e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:05:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:28:a2:8f:33:6b:11:b5:69:08:fe:e0:68:
b2:f9:2b:8c:37:4c:45:2d:04:6b:02:e8:0b:f9:51:
6c:b9:7a:e8:4b:77:ef:d8:c6:5d:96:c1:ef:70:53:
0d:7b:7e:00:71:3b:26:74:3f:34:53:48:91:56:73:
65:bc:b4:57:83:c7:8d:16:f1:c7:f0:82:3a:1e:44:
9d:2c:b5:26:f1:a1:3c:fd:f4:4e:af:57:0b:9d:ad:
ff:98:5f:db:6c:90:58:a5:49:40:84:ee:5a:d6:b0:
b5:0d:96:31:7e:5d:30:b4:1a:fd:69:3a:49:52:21:
ca:7a:68:85:2a:ed:ba:ca:27:6c:85:b9:40:fe:9e:
7a:2d:0e:c6:65:63:30:1e:55:3e:5c:62:88:95:fb:
94:07:5a:5e:0a:a4:90:ab:85:ed:70:b5:89:df:4d:
18:e0:ba:4e:61:24:61:10:51:02:86:65:59:d4:44:
ca:fd:e0:a5:21:6e:bb:e5:27:c8:29:b3:03:78:b0:
e0:77:af:cd:14:6a:61:66:5b:d5:b7:46:5b:2a:d4:
56:34:8c:71:c5:8e:ff:4d:5a:9a:08:d9:05:01:31:
46:24:92:f0:f7:6a:5d:05:d5:57:46:96:a4:70:95:
0f:45:86:1a:23:37:1d:a1:c5:d2:42:4c:bf:aa:d0:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.20.0/23
IPv6:
2001:df1:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
d4:01:22:ab:4f:30:b1:a8:3e:de:49:95:b6:2f:0c:bc:0c:75:
99:70:cc:1b:47:4b:dd:53:03:d2:65:71:40:aa:f4:06:13:ab:
05:a3:0a:7d:0f:e3:f9:03:d6:fc:62:99:94:40:29:d6:35:6b:
03:6e:a6:35:21:45:c8:b6:14:17:18:33:cb:63:b3:c0:2b:ed:
87:80:94:8d:97:b8:1f:ce:64:bf:1b:be:11:60:88:63:90:30:
d6:e3:ea:a3:21:a8:0a:56:b8:fd:f3:7f:47:82:f9:e5:f5:f3:
cb:a0:62:ee:e0:56:47:f3:40:4c:5b:a1:3b:4c:6f:6c:23:6a:
0b:45:8a:4b:1a:1c:9e:5a:46:5a:7f:5a:8d:6a:2e:1c:f3:93:
95:c0:d6:15:90:5f:6a:47:84:e8:ec:4d:8f:d8:f9:8a:90:79:
7c:ac:5b:b3:d4:70:f0:ea:4c:1e:b4:1a:6b:8b:d2:3f:a6:94:
22:36:e3:b2:05:b8:ba:a8:45:85:65:7d:01:75:2b:60:57:cf:
20:f6:4e:83:91:b5:3e:39:9c:e1:bd:b6:9f:53:24:d1:88:a2:
90:99:a5:40:ae:fd:63:17:13:29:75:bf:54:69:4b:3c:79:80:
0b:7d:45:80:be:14:6a:5c:88:4d:de:a3:28:33:0d:f2:b4:4a:
11:7a:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:42 2026 by rpki-client