Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
File: OS824KRQBTw9xm0uOJThDKcz3aY.cer (raw, json)
Hash identifier: 7cwxw3L69RcKoM7pbbMBC2JJyhBBT6sSxjQgH3nx0C8=
Subject key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D351
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 14:16:00 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 103.68.192.0/22
IP: 121.54.188.0/22
IP: 2403:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185169 (0x2d351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 14:16:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:f2:a0:0e:f1:96:bf:9a:62:b6:df:c6:36:
a8:4e:b7:30:e3:f5:44:18:76:f2:41:4a:f5:8e:5a:
09:33:b9:00:96:1e:cf:c0:18:a6:1b:d6:49:b1:98:
bc:b1:e2:d8:49:17:ed:6c:2b:2d:d0:19:1b:45:10:
34:6e:78:a8:9e:9d:c0:b9:cb:77:d8:b0:09:c2:6c:
ec:a8:16:43:23:31:94:83:31:bc:d0:cd:c9:5c:4b:
be:6d:70:38:89:8f:14:24:56:b2:b3:32:d0:66:bc:
4f:d3:d0:2e:bf:c1:80:21:5d:44:9b:8d:57:e8:d1:
fd:bd:69:36:44:a8:65:ad:13:32:0b:b3:fa:88:fd:
d1:c4:95:ac:e6:e6:96:07:a8:67:ae:fc:3e:4f:5f:
b2:9c:4d:20:e6:3d:d5:99:e0:c8:05:bb:26:07:a5:
4b:8e:8f:53:92:e9:90:ab:f8:f6:b1:f8:40:ab:c9:
c8:1d:d6:2c:2a:24:2e:af:90:c0:ac:ed:3e:72:32:
5b:63:05:91:6c:64:81:b7:28:af:53:61:74:47:68:
3e:73:79:35:b5:c6:22:88:85:3b:d8:10:ee:54:9f:
1e:bd:94:7a:94:a7:f6:74:d6:a0:a4:9b:7d:16:cf:
86:dc:dd:ef:04:2d:b4:85:6d:7f:c5:33:41:84:78:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.192.0/22
121.54.188.0/22
IPv6:
2403:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
12:e8:69:1c:77:5b:b0:da:18:85:0b:78:46:b6:87:79:e0:35:
59:bf:bf:62:ca:3a:23:35:96:9b:b3:6e:42:c4:a1:e8:19:b8:
ad:44:91:a8:7d:78:23:c8:60:1d:e7:13:cf:25:1b:ed:c5:ce:
29:51:3c:e5:ca:81:9a:81:7a:59:47:41:3a:d4:84:39:fb:f5:
86:7d:72:df:b4:aa:35:69:91:da:a8:c8:42:19:82:62:36:c3:
00:0f:f1:7a:ed:92:89:8a:95:07:d1:c1:b6:8e:77:51:d9:fa:
0e:9f:17:54:44:7a:28:9a:a4:21:69:e8:a7:27:dc:bc:3c:11:
ec:2e:c0:12:b1:21:3a:40:7d:24:3c:6b:b5:91:77:5e:55:bd:
89:67:fa:38:d4:54:9d:29:c1:ba:52:ed:08:9e:66:77:bf:9c:
f7:f8:04:a1:1e:fa:b4:4f:c8:ce:98:98:6b:4f:d2:2f:2f:31:
d0:56:e7:2d:26:22:86:33:88:ea:dc:3a:e0:94:66:fb:16:59:
b9:69:10:95:f7:dc:4a:2f:11:5b:4d:5d:09:c5:58:e1:89:f4:
83:e8:59:2b:5b:2e:18:dc:c9:35:05:a2:be:64:94:01:67:9a:
d7:96:a6:99:1e:6c:e3:cd:ff:98:a0:ff:ee:68:9d:fd:29:09:
3c:42:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:05:56 2026 by rpki-client