Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
File: PWRH1yl0gylOzsuFOl5QCTXRuNc.cer (raw, json)
Hash identifier: wyuczadXUoPZljAZ8uM3+Xb2Y75a0MP2rRU2enoe98s=
Subject key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029E52
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:06:10 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.177.248.0/23
IP: 2400:3e20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171602 (0x29e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:06:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:0c:4b:d7:a9:4b:43:ef:82:40:0d:d3:7d:
94:ac:36:59:d8:ab:4e:44:1d:1d:18:30:90:6d:de:
95:f8:bf:8f:d3:45:8a:75:7d:b1:95:87:93:9f:da:
1a:2f:07:97:7e:0c:dc:ca:34:02:d3:c2:97:a7:67:
5f:1f:82:60:93:10:88:e1:10:1e:21:04:87:2d:85:
4e:da:17:a7:d5:34:31:d3:ad:32:49:c2:1f:3d:4d:
95:83:c8:f6:e4:6b:92:1b:f8:43:6e:dc:0a:e8:80:
fc:94:af:20:9d:60:62:8a:5b:3f:ce:f1:55:a6:bc:
25:bd:69:ad:27:2b:a7:e5:ad:82:3c:eb:1d:88:0a:
cf:59:83:26:84:46:df:5f:8a:7f:84:38:cb:11:74:
8d:6e:76:de:fa:02:4d:d7:4f:4a:4e:21:04:1c:be:
a3:9a:34:0a:fc:aa:31:c9:68:53:d2:9c:43:1a:2b:
aa:9e:d5:22:e9:aa:93:72:58:db:a7:d9:7b:f6:2f:
71:e8:9e:1e:4d:ac:ca:c7:68:95:ab:67:7a:e3:5d:
d4:41:c5:89:aa:9d:53:d1:35:c3:92:3a:23:59:36:
87:25:1c:7e:94:3d:79:d6:1f:c4:f5:0e:ca:f9:06:
ab:79:a8:37:4c:f9:23:16:b0:44:02:38:5e:2b:be:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.248.0/23
IPv6:
2400:3e20::/32
Signature Algorithm: sha256WithRSAEncryption
88:65:ef:1a:be:3c:b2:92:0c:bd:ee:1a:f7:b9:2d:4f:fb:bf:
c6:f1:20:ca:50:1b:79:c4:5a:5c:0e:d7:85:d7:e4:61:b7:78:
85:69:04:c6:7c:1e:0f:32:cf:5d:f2:9c:4c:bc:90:b4:f6:27:
11:31:57:2d:c2:ba:9a:5b:94:e5:0f:d0:3f:18:5d:53:b5:d3:
d4:86:f9:0f:c6:62:c1:0b:b9:e4:73:2a:71:68:44:c2:47:93:
4f:50:05:23:30:1b:e1:44:5a:9a:23:b4:cc:d6:3c:a3:00:9a:
e6:be:97:ca:ff:ad:f5:8f:52:e7:06:25:b5:5e:cd:d9:12:11:
70:2a:21:d4:47:4d:59:1f:56:34:8e:26:89:53:8d:ad:12:7a:
dd:d2:cf:23:56:88:41:88:00:18:37:2a:80:bd:28:0d:b6:f6:
78:43:aa:7c:bf:32:8d:10:1e:b0:f9:51:4c:b1:ff:53:13:c7:
c5:3a:c2:85:d8:61:15:37:87:66:9a:87:d8:2c:d6:38:3c:e2:
b4:b7:0b:ef:8d:a6:bf:d5:81:25:37:ed:23:7a:09:93:d7:a9:
ac:fd:07:90:57:ff:29:ff:08:74:1a:bb:46:58:47:39:b7:12:
53:ee:b9:e9:dc:ae:58:da:23:ba:8c:69:80:7c:ae:23:93:b9:
b3:68:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:41:53 2026 by rpki-client