Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
File: OYVAYLL1jUyRnGTapLfrHwzfaDA.cer (raw, json)
Hash identifier: fv9e40cbN0fWv4Li2C+k/Zq8YhP1zJDH6Y5aVRcS3eo=
Subject key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DE3E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 Oct 2026 00:34:33 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 56093
AS: 133145
IP: 202.7.2.0/23
IP: 2001:df4:800::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187966 (0x2de3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 15 00:34:33 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:e8:a7:a7:f0:bc:21:fa:27:ce:32:06:5f:
07:ad:77:35:5e:0e:6e:42:9e:36:6e:33:70:9a:c7:
22:1c:59:54:19:9c:eb:62:82:21:81:4c:36:0d:11:
37:49:3c:0f:91:6c:07:ca:95:98:be:28:9b:42:38:
0a:ff:d8:b7:fb:96:3a:7f:ee:33:20:55:36:07:ff:
15:ec:e3:4d:11:64:7f:e1:33:c8:68:64:72:51:d3:
db:b2:fb:f2:c4:78:33:0c:54:e9:34:e8:d9:81:5a:
51:2b:7f:97:31:84:eb:8e:dd:ca:8e:2e:02:18:df:
2c:45:9a:81:87:8f:ce:be:d8:3f:dc:ec:76:3f:e7:
cb:fe:59:b9:41:62:8d:c3:c7:26:3d:cd:74:c9:3a:
17:ac:74:12:93:70:27:6c:38:82:91:b7:05:a6:e7:
ec:f2:06:7b:2c:86:89:3b:76:6a:ad:a1:3a:c2:2c:
29:3a:02:fc:00:9d:2b:22:fa:46:5a:26:fb:47:bc:
c2:7c:08:7f:8b:c3:d1:2c:74:83:3a:48:8e:cb:11:
53:ab:c6:d7:48:48:d5:3d:f5:bc:d0:b9:13:f9:38:
0c:a0:61:e0:35:a9:31:6f:cd:5e:6f:e8:3f:6f:98:
35:4c:30:0c:40:91:d4:d5:5a:a1:6a:eb:25:38:4d:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56093
133145
sbgp-ipAddrBlock: critical
IPv4:
202.7.2.0/23
IPv6:
2001:df4:800::/48
Signature Algorithm: sha256WithRSAEncryption
b2:4d:b5:c4:4c:ec:f6:e8:18:36:39:33:49:94:55:62:bf:2f:
a1:d7:d8:34:46:5f:e0:b6:76:b3:52:6d:7d:51:13:ab:79:fc:
2f:61:93:11:f1:d8:b2:22:eb:15:fd:0c:cd:c6:93:27:cd:7e:
72:d7:76:6d:5c:ab:e4:e3:54:8f:89:45:95:1d:33:ca:d2:57:
c6:04:f8:53:41:15:9a:a1:60:2b:6e:af:b9:91:f2:31:eb:e6:
40:29:9b:b3:6d:05:bd:26:f9:7c:29:c0:cd:bd:37:1c:46:45:
64:5d:cd:5a:86:71:d1:08:e6:cf:1a:fc:76:2e:ca:4f:3e:1a:
5a:a8:fa:23:58:c7:36:58:e7:fa:a4:f4:1f:6e:78:62:da:43:
7d:77:d2:6a:5c:18:37:35:0c:54:23:93:a4:e6:f1:64:5b:1f:
4e:ab:db:29:ce:0c:e5:06:d6:09:e0:82:81:51:7d:ec:26:14:
24:8a:2f:46:aa:cc:f4:c5:f0:a0:b4:7b:74:f3:ec:0d:22:89:
fa:ce:f2:54:7a:fb:71:33:6d:08:ce:38:ea:5e:61:eb:02:e1:
6c:fa:d5:43:13:c7:7e:2e:01:5b:78:d7:52:a0:56:ef:e3:35:
a6:a5:70:5a:ab:f7:0a:e8:92:a7:b1:27:8a:f9:e2:ef:3b:fc:
5a:55:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:16:41 2026 by rpki-client