Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
File: F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer (raw, json)
Hash identifier: w2IExBatKtG9R3rrb7+1/6Auz+8Dg9N5NtOLT6xFK8c=
Subject key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02925D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:09:07 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 58800
IP: 103.245.108.0/22
IP: 150.107.52.0/22
IP: 2406:b00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168541 (0x2925d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:09:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:55:60:0b:43:49:0c:5f:1c:cd:2e:71:57:
75:c2:aa:25:69:60:ed:85:b6:1e:59:d9:84:60:23:
9a:f5:ec:22:21:4f:55:16:8f:47:8a:bc:8a:28:f3:
f0:77:e4:d1:4d:8b:86:46:67:52:28:2c:44:42:79:
3e:ca:fe:8b:a6:21:40:e8:af:09:f1:be:b8:7f:39:
88:2c:ad:5c:bb:7a:a7:8f:0d:90:b9:4c:d9:12:98:
64:f6:dc:9a:8a:58:3c:b0:88:11:1e:a5:75:4a:6e:
4b:ca:cf:d0:1a:f5:a1:09:e0:0e:47:b4:3d:0d:71:
a2:c2:b6:ca:d1:77:e2:f8:e8:e6:59:ee:38:32:02:
5e:2b:ef:d1:62:54:d7:db:79:b3:84:29:5f:90:a2:
0d:dd:43:38:8e:97:3d:3b:98:f0:f4:a3:b3:55:80:
2d:19:66:84:64:30:8e:02:2f:02:c7:e5:69:b7:4c:
55:ae:2e:68:3c:09:f5:be:9f:cf:f5:81:ea:0e:1d:
cf:00:fb:0b:47:42:a0:78:8f:aa:98:91:65:26:56:
f3:9c:f3:25:cc:ea:3f:29:c1:67:1b:0f:7b:e3:8c:
81:55:24:fd:6d:c6:c3:59:fe:b4:ae:76:86:01:f0:
76:78:10:1e:b0:a8:de:c4:61:69:ba:01:87:63:0e:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58800
sbgp-ipAddrBlock: critical
IPv4:
103.245.108.0/22
150.107.52.0/22
IPv6:
2406:b00::/32
Signature Algorithm: sha256WithRSAEncryption
11:70:9f:16:8a:d2:d9:4a:54:e9:1b:8b:e4:58:9a:8d:64:fe:
17:96:df:60:de:8a:3a:a3:36:e3:bd:0b:bd:25:1c:39:0a:e2:
a2:15:ea:54:c4:0f:b8:3a:fb:1b:61:51:46:07:fb:85:74:5f:
87:ec:c0:b1:ef:a4:bf:46:e9:65:ba:55:92:7f:fa:29:b4:74:
81:5b:01:b1:ab:04:de:4e:4a:dc:67:ac:be:82:ff:54:22:15:
0e:28:d5:9f:32:1c:3d:48:b7:b5:17:fd:ff:6f:aa:54:40:31:
d5:8b:1b:12:7e:75:a6:1a:9b:71:5a:37:38:94:0e:22:d4:48:
3f:b9:6f:0c:12:c4:cc:7e:7f:19:00:8e:9a:85:2e:bc:9f:b5:
58:d8:45:96:73:e6:21:9b:1d:0b:85:0c:d8:d5:61:57:21:09:
ff:4e:a4:c8:7d:31:c6:2e:35:10:5d:c5:1e:e9:f0:5a:d2:77:
09:39:32:43:3a:07:96:4b:7b:7a:6c:68:47:cc:0c:80:d1:2a:
7b:e5:d4:3e:16:cb:2c:8b:1b:40:c8:14:21:d7:c3:9d:39:20:
87:d1:3f:93:1e:4e:51:99:4f:b1:91:2d:39:b5:9b:c9:f1:ae:
5e:ea:28:d6:b4:de:e8:f3:50:20:a9:3e:6e:f3:93:df:9e:74:
ea:2e:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:38 2026 by rpki-client