Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer
File: Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer (raw, json)
Hash identifier: H0DEzf916M23IKJLefwn5BZxVKWKB7U1a7+OR9s4hMc=
Subject key identifier: 26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ACA8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Apr 2026 01:56:21 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 203.25.24.0/23
IP: 203.25.142.0/24
IP: 203.27.225.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175272 (0x2aca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 01:56:21 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A914860F, serialNumber=268E596E291A7FAF510D1BF72848DFB086D5C941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:f2:14:1e:c1:dd:7e:cc:e3:2a:f5:d6:1b:
92:80:62:99:e0:23:0e:53:6a:89:3d:32:55:1c:12:
a2:ec:63:25:75:48:85:79:24:a9:e7:55:52:2a:fb:
01:c0:8c:02:02:6e:c1:9f:b7:68:53:09:f2:f3:3e:
1d:3a:8f:b3:86:34:11:59:ca:42:2d:d5:08:fb:65:
16:26:9d:da:e6:8c:99:f0:c4:d4:d2:2a:17:db:45:
79:80:fa:c4:78:ac:98:fd:0c:a6:41:93:52:c7:62:
39:e8:fc:10:6a:10:70:64:d5:21:8c:95:a4:3f:8e:
4d:64:9d:a6:22:91:a0:de:b5:84:1b:10:8c:b8:e1:
00:0d:92:36:ee:40:c9:54:70:4f:18:5b:ef:0f:d1:
72:1f:b6:6d:47:ad:b5:2f:42:97:0f:f3:af:d2:90:
b1:33:1e:15:cc:63:4a:59:70:b2:9e:7b:b6:6e:06:
f3:3e:7d:81:a9:09:3a:65:40:ce:e3:12:2e:38:fe:
43:35:df:ea:7a:4e:18:64:6a:e6:ef:4e:26:6a:fc:
c1:ab:82:e4:00:94:46:e0:46:87:5f:71:6a:9c:26:
98:0c:91:9f:b4:c7:8b:d1:cf:56:4a:dc:09:52:a0:
33:44:a2:e1:71:7b:a7:b7:69:f2:63:39:29:35:2b:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.24.0/23
203.25.142.0/24
203.27.225.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e9:ee:7f:96:7a:23:dc:87:e4:33:80:60:78:01:b5:6d:69:
ef:eb:45:4b:95:41:6e:08:57:8b:cb:77:d3:b0:f7:21:68:1f:
12:b5:38:6f:c4:b1:2a:9d:b5:2e:8b:f6:ea:4f:58:8b:a5:b7:
a1:bd:5e:ec:e3:15:94:3b:31:af:fc:57:a8:cc:6f:c3:46:88:
57:93:41:01:5c:59:d9:3d:d1:06:94:4a:e1:67:ad:75:c3:77:
8b:a5:0b:e4:b6:c6:b6:6d:bf:50:e1:fc:0c:c5:dd:06:65:d8:
1f:4f:d9:8b:c1:ff:97:2b:d5:cf:48:6c:5a:f2:b3:d9:67:34:
a6:61:0e:20:59:0b:cd:27:de:71:79:62:2c:c9:9f:c3:58:de:
18:37:58:f8:a0:98:77:1c:59:45:de:00:af:fe:6e:02:34:b0:
a4:77:4d:2c:75:9d:3e:2c:80:69:38:8c:91:b2:22:d2:b5:a4:
db:a0:dc:3b:f5:82:87:42:56:cf:71:9e:59:2a:aa:fb:9b:dd:
9a:12:24:df:87:ea:3c:f3:0c:b1:65:f0:d4:b9:69:c5:57:9c:
60:b9:0f:e4:63:98:5b:40:a6:12:7f:0e:e0:56:fe:b1:7f:e3:
17:76:25:e5:17:a5:db:7f:6f:01:b8:a4:d3:94:0e:b0:b8:be:
63:d5:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:06:56 2026 by rpki-client