Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
File: PurfFFrim0gkCj-6OvvZSajxU10.cer (raw, json)
Hash identifier: GP6rb6hg63iPTrKvQS4zARE2fQuvC/NbHbJJto/NrjU=
Subject key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029DCA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:03:51 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 203.13.208.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171466 (0x29dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:03:51 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:b1:93:9f:0b:83:f5:cb:d0:8d:2d:06:1b:
6d:35:e0:1b:42:d0:fe:14:cb:88:97:7d:a6:95:a4:
1d:10:ce:cb:26:ef:39:2c:88:0c:e1:3c:9a:57:2b:
44:43:d1:70:06:df:5a:10:94:7d:d9:da:25:89:4c:
2f:7f:10:f9:e5:59:a6:64:0b:de:16:28:01:e1:c5:
14:31:f2:cf:0f:6f:43:03:3f:1e:51:49:09:56:63:
fd:a5:63:52:d1:42:5b:28:39:9d:cf:7c:fe:02:8d:
19:d2:33:7c:b4:ca:74:c2:c8:53:4b:d7:32:81:6b:
9b:b0:85:bd:90:1e:22:a8:41:b9:bb:da:5a:36:c6:
e8:01:05:3c:69:1c:c6:3a:77:fb:23:d2:5b:3d:6e:
b8:5c:45:64:4f:30:d0:f7:cc:5f:36:b2:26:49:20:
65:d3:9d:7d:9b:0a:b8:c5:cc:26:ba:2a:ed:0b:97:
54:85:92:c9:76:2c:95:6e:30:a8:78:d3:3a:da:e6:
17:6c:eb:7a:fb:76:f5:7c:6d:a7:22:3c:5e:97:1c:
db:72:da:11:3d:20:ce:90:d3:e3:25:2f:c9:60:26:
9e:54:ec:a0:06:fa:d5:87:17:5d:bb:01:02:b3:83:
6a:37:89:6e:f7:75:ba:e3:76:cd:b0:af:e8:d8:fd:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.13.208.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:25:2c:c0:8f:ea:e4:9c:15:c1:61:f3:9b:0f:af:c1:41:62:
ab:22:68:85:7f:15:ed:c5:c3:47:31:ca:6d:c6:f0:4f:a7:1c:
5a:e6:ef:89:fd:ae:75:d6:19:dc:dd:4e:ed:10:74:d5:73:03:
0c:37:24:96:92:83:09:32:13:47:8e:55:d3:92:f9:da:ef:b0:
4e:e9:0c:9d:74:0f:84:42:9a:37:2d:e0:74:c1:14:51:24:97:
0d:a5:30:63:f9:f4:1a:7b:4a:8b:b1:42:80:de:42:30:4d:33:
7a:a2:90:3c:4d:cd:15:26:2d:6d:7b:23:b3:9f:03:c4:4a:ee:
f6:a1:83:bd:52:38:0b:28:57:d6:d2:fb:79:1e:24:89:89:83:
f6:b4:a5:ea:26:ba:4f:a6:ed:82:a0:2b:84:af:d0:5b:81:26:
b3:b6:ae:3a:12:95:f6:02:76:17:f5:79:58:f8:c7:e8:09:94:
ad:03:43:e3:f4:ee:8b:8e:6f:d2:5a:c7:8c:9d:52:28:c6:76:
84:6e:4d:14:3e:ae:fa:21:ab:17:01:77:7c:a1:14:1e:32:c2:
bd:89:04:a5:31:b2:74:39:bb:5b:fe:78:ae:cc:14:0d:b2:2f:
fb:0f:a0:d0:08:57:0b:a2:ef:4f:bc:db:90:19:db:2c:b5:43:
d5:7e:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:48:50 2026 by rpki-client