
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EABVOpvJE4QgnFKpyPZRi1bVxpg.cer
File: EABVOpvJE4QgnFKpyPZRi1bVxpg.cer (raw, json)
Hash identifier: FvsZY6u5m7m0LYgAYpG7mnpJcSzf1Xhm0adgo/1/F68=
Subject key identifier: 10:00:55:3A:9B:C9:13:84:20:9C:52:A9:C8:F6:51:8B:56:D5:C6:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B642
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 May 2026 01:10:06 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9471
AS: 55943
IP: 103.254.224.0/22
IP: 103.254.232.0/22
IP: 123.50.64.0/18
IP: 202.3.224.0/19
IP: 202.90.64.0/19
IP: 203.185.160.0 -- 203.185.183.255
IP: 218.100.77.0/24
IP: 2001:de8:16::/48
IP: 2402:6d00::/32
IP: 2405:cc00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177730 (0x2b642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 22 01:10:06 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9185308, serialNumber=1000553A9BC91384209C52A9C8F6518B56D5C698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:59:80:8c:a7:d5:2e:af:21:5e:b4:b4:d4:
5d:2b:22:5b:2d:33:1a:fd:ab:bc:03:a8:65:e2:14:
07:91:e6:16:92:87:3e:52:36:49:41:15:bf:76:51:
e6:ad:cf:f2:a2:91:ac:b1:d5:34:86:82:03:fd:2c:
dd:83:93:36:2c:32:63:7f:e1:4c:c9:1d:54:05:42:
18:bf:c1:b6:dc:59:7e:e8:ce:27:21:3a:e4:f8:fd:
3f:c6:c6:e1:4c:eb:aa:5d:ba:eb:64:42:da:86:e7:
55:41:1d:8a:63:46:62:c3:13:fa:59:0f:2a:f9:cb:
43:c3:a2:37:eb:a1:78:38:1a:07:89:f1:19:f9:86:
de:5a:f4:0a:fb:25:9f:4a:60:fc:ea:79:a3:f7:a9:
ec:55:a0:c5:4c:a8:e6:22:15:3a:6a:de:cc:1c:e1:
ff:da:09:b7:e7:d5:46:f0:b4:3d:3e:57:e8:95:1e:
22:47:87:85:90:9b:0f:71:38:d8:bc:95:df:3d:fa:
05:fd:33:f4:dd:8d:3e:67:bc:62:74:97:e0:ac:81:
82:85:9d:fd:4e:d3:22:74:b3:34:2c:dd:47:5e:c3:
21:d5:a0:31:eb:88:60:72:61:29:a4:2f:b3:a7:b3:
b2:59:98:f9:50:b4:99:8f:74:72:d6:9e:e7:e7:98:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:55:3A:9B:C9:13:84:20:9C:52:A9:C8:F6:51:8B:56:D5:C6:98
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9471
55943
sbgp-ipAddrBlock: critical
IPv4:
103.254.224.0/22
103.254.232.0/22
123.50.64.0/18
202.3.224.0/19
202.90.64.0/19
203.185.160.0-203.185.183.255
218.100.77.0/24
IPv6:
2001:de8:16::/48
2402:6d00::/32
2405:cc00::/32
Signature Algorithm: sha256WithRSAEncryption
55:05:9a:14:d3:04:d6:70:a3:ab:03:7d:03:ef:62:32:52:9b:
93:07:84:1b:bd:e2:e3:e6:af:8c:9b:38:03:df:84:56:ca:46:
67:3b:4d:0e:4f:f7:26:03:8a:d2:d6:ae:3d:06:10:9e:00:dd:
e5:ef:91:e4:02:fe:4e:04:d0:ef:2e:ce:83:c4:bd:40:0e:02:
ee:9f:80:39:6b:d9:a9:d7:67:39:f8:8b:cb:66:7f:32:fe:64:
20:43:b2:eb:b6:fd:f8:40:ef:42:c9:d3:e6:42:07:55:9a:44:
e0:dc:ce:54:aa:07:df:4c:74:cf:d6:0c:cf:7c:f3:46:d4:99:
75:42:d3:5e:cc:04:d3:a7:6d:9e:3c:b5:71:d0:e7:b4:d0:54:
26:23:c2:dd:2e:ce:9c:e6:ee:32:80:18:71:e1:37:8f:ed:20:
c6:6d:a6:e0:5f:a2:4b:12:d1:aa:9b:5a:c2:51:40:7d:9f:55:
07:6b:4a:be:3b:0a:98:d6:5b:76:fc:10:c3:99:08:94:40:48:
41:6b:7f:af:d8:40:b0:1e:75:ba:2d:b3:75:f9:81:de:ec:ba:
d2:6c:cb:6c:71:dc:4c:ff:9e:9a:a8:ea:75:a7:3a:8d:45:f5:
1d:6d:6b:28:d9:a3:1c:7d:1c:fd:cc:85:36:c8:d1:a4:17:79:
6a:ee:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:39 2026 by rpki-client