
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
File: WpbU7D01JJTZI51SrzWsEE2hL50.cer (raw, json)
Hash identifier: 6UL4Ux9FnJ+hHYORz2unA4Efl0f5TUXqFdllt42YLxs=
Subject key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F1E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:43 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 9831
AS: 10085
AS: 24235
IP: 103.3.192.0/22
IP: 202.3.160.0/19
IP: 202.55.224.0/19
IP: 202.153.160.0 -- 202.153.207.255
IP: 2400:1300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171806 (0x29f1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:22:3e:0b:a4:e3:eb:76:4b:3e:bc:ee:76:
60:de:cd:5d:94:5d:82:f3:7a:d5:e5:09:db:9a:80:
c8:a9:b1:ae:d6:f6:2f:3b:77:f4:fa:35:61:c8:9c:
5e:42:25:43:93:8a:0a:8d:fb:3d:27:24:0f:d8:2d:
39:fd:d6:b8:c5:02:df:14:9a:aa:8f:88:11:6c:d2:
99:44:b9:b1:07:95:46:24:5d:50:af:bb:7a:c3:93:
c5:7f:19:ef:1a:b9:04:d8:79:75:cc:d9:29:88:05:
9d:9d:7b:7b:26:69:6c:be:bc:58:0b:0f:6d:6a:ac:
82:3d:01:f8:0f:06:8d:66:5c:1b:83:44:6c:94:4d:
48:3e:6f:1e:f8:c0:a1:fe:d3:5d:5d:97:27:e9:34:
13:9b:b2:ff:ca:2d:a4:e9:4d:b5:2b:09:3c:83:ae:
39:bc:91:d4:6e:8d:93:6b:ea:fe:56:98:5a:85:9c:
dc:5f:07:e6:d2:71:d5:9d:8a:54:08:8c:c3:35:b0:
88:f7:5c:80:25:10:da:d8:93:54:0a:65:75:d1:3c:
73:30:e0:31:a4:ed:c6:64:3b:e1:a2:f4:d1:d3:e3:
39:f2:16:2a:a1:ba:0b:07:60:08:06:31:fc:58:8b:
09:57:cd:97:55:b2:93:bc:b4:7c:4e:5e:70:d4:0b:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9831
10085
24235
sbgp-ipAddrBlock: critical
IPv4:
103.3.192.0/22
202.3.160.0/19
202.55.224.0/19
202.153.160.0-202.153.207.255
IPv6:
2400:1300::/32
Signature Algorithm: sha256WithRSAEncryption
16:aa:5e:f9:3b:54:ac:32:8e:c0:2f:3e:38:06:e7:48:c9:86:
65:dc:71:c7:de:19:63:21:4c:7e:18:b9:69:c0:fa:27:af:4c:
cd:53:e1:43:0b:3e:01:2d:44:25:30:86:ea:cb:e4:28:05:a3:
65:68:c7:9e:f5:36:70:23:73:5a:bf:bf:07:3f:75:2c:0c:ca:
33:14:c4:4d:96:f9:59:d1:f9:e4:52:29:e0:78:cd:9d:c3:b0:
0e:72:0b:b2:70:a6:37:2c:01:99:b9:c0:ac:2c:e3:02:a7:e3:
e8:6d:bc:f4:5f:93:e5:7e:bc:8f:86:d2:ec:91:1d:29:9b:ac:
c8:2b:dc:d5:99:3c:c4:3f:1f:c4:c8:d4:7e:8e:ba:be:4f:52:
25:bf:a1:05:b1:85:4d:31:cf:fe:1b:bc:1e:5f:e5:86:fc:84:
3f:4d:63:55:1d:e0:1d:31:84:9e:87:6b:a0:f2:68:3e:03:fb:
6e:64:f9:2a:d3:db:24:1e:9e:ca:da:55:80:b5:c7:93:3a:0c:
f8:f7:fa:ff:df:ff:6a:d1:bf:37:d1:4c:80:61:55:20:45:91:
c9:d7:72:32:77:87:de:fc:1b:b3:2c:f0:c9:d4:55:57:a8:d6:
c9:58:cb:69:a5:f1:28:b0:cc:ac:a4:08:4d:b6:40:a9:5b:20:
1a:21:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:40 2026 by rpki-client