Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer
File: CIaR8feL2c7-2A021lDWd2emvbA.cer (raw, json)
Hash identifier: 41T/zWq/6bTDzKPKIlS/16ugAdnB0NvqCI2FhJTIifk=
Subject key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C656
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jul 2026 13:56:46 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 131188
IP: 103.1.12.0/22
IP: 111.91.236.0/22
IP: 2403:4900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181846 (0x2c656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 21 13:56:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:90:dc:67:ef:44:ef:f3:85:72:b8:c7:ef:
ce:f0:97:ae:6f:75:4e:bb:19:e6:6b:cc:7d:80:a8:
37:6f:fe:57:0a:97:c5:2c:ab:f8:24:d1:ad:71:3d:
12:51:79:0a:8e:6a:d0:1f:bd:4f:11:38:fa:79:79:
1d:ca:d1:eb:78:24:8e:89:23:ef:37:0f:6d:50:49:
ff:7c:ea:1e:95:1b:86:6d:b2:ee:5a:95:70:fd:44:
40:2d:9d:4d:e1:ba:0a:33:94:a8:40:6b:6b:3a:c2:
6c:2f:58:d8:98:b9:05:f7:94:a8:63:94:9e:35:92:
52:f4:ff:48:2c:e5:17:19:b3:cc:cd:15:60:a5:6b:
c8:05:31:2e:6d:d1:0e:17:a4:4f:4c:f3:07:f4:27:
6a:be:2e:56:18:dc:61:9d:3f:57:f2:3a:12:8d:52:
68:d7:e9:94:e7:d4:76:aa:e9:e2:83:6f:37:16:b2:
88:3d:76:3c:b6:28:34:7f:9e:cc:7f:24:d8:ee:a1:
27:ea:15:65:00:b2:0c:24:b8:da:f9:4a:05:d6:7d:
3d:7b:7d:f4:72:d1:5f:21:d0:ab:65:cd:42:6b:3d:
fb:45:d7:80:52:a3:e3:bc:11:b1:a4:f7:4e:ab:97:
e4:a7:0e:ce:2d:10:ee:a5:24:b4:91:84:ae:2c:ce:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131188
sbgp-ipAddrBlock: critical
IPv4:
103.1.12.0/22
111.91.236.0/22
IPv6:
2403:4900::/32
Signature Algorithm: sha256WithRSAEncryption
49:3a:a7:e5:55:ac:f9:c2:be:fc:82:c6:77:6b:1d:46:f0:9d:
ba:fb:9d:18:02:0a:b4:24:03:d1:a8:9d:ad:e3:1f:f3:49:85:
84:42:2f:c7:38:70:8c:a2:1a:9a:50:9f:af:05:62:73:5e:0e:
11:07:9b:4d:17:15:4a:02:0d:b8:5d:56:f5:57:c9:e6:ca:06:
b5:8f:3c:57:db:f2:fb:1f:cb:ec:a2:c6:88:65:bf:e9:c4:bd:
5d:1b:86:dc:84:8a:ce:76:ce:25:b9:1c:54:02:5d:02:09:50:
76:d6:d0:3c:7e:e6:a6:ff:5c:b2:81:1e:4f:b1:2e:1f:aa:d7:
6a:e4:f1:b8:f2:96:57:fd:b6:a1:66:a9:76:b7:ce:17:1d:d1:
39:ad:86:45:0e:42:ad:a3:25:e0:6d:b2:83:df:e9:f9:0d:5c:
c8:bc:0d:f7:9b:3e:4f:51:e6:0a:ff:e0:2a:3a:71:97:4d:d5:
d7:e2:56:d0:dd:6f:dd:4d:1e:27:3e:78:e0:bb:e6:c5:c0:bd:
bb:40:d1:74:72:ae:95:ed:ff:86:f6:89:1c:6e:5a:09:83:2d:
9b:cf:7b:6a:73:77:1b:b8:f5:9e:ff:51:43:5a:79:4f:51:89:
de:7c:03:c1:94:9c:fd:7b:9b:1e:e9:5a:8d:06:d9:de:40:00:
ed:84:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:09 2026 by rpki-client