Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
File: WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer (raw, json)
Hash identifier: 399i3W34vixI1uE5sRBG/wbmnJi2SIXeFjlXFw6NyzY=
Subject key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029B93
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/58/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Fri 27 Feb 2026 03:53:27 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 4785
AS: 138038
IP: 103.201.128.0/22
IP: 202.5.220.0/22
IP: 2403:ac80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170899 (0x29b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:53:27 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:f9:f3:38:2d:de:06:75:21:73:ab:8f:06:
a5:b6:8b:6b:b7:60:fc:89:1c:2d:69:d4:04:f0:e9:
74:e3:13:3e:1b:ff:bc:36:37:b3:b4:37:b7:f6:df:
c3:aa:af:a7:9b:38:e5:30:af:8e:b9:0b:cd:7a:84:
1c:69:dc:ad:38:69:40:9b:08:ed:1a:1f:97:42:53:
d8:df:61:7c:7b:3f:86:0a:c6:ea:24:a8:85:03:72:
14:b8:66:41:08:6f:b5:96:34:48:40:59:d4:07:8e:
56:2e:f7:80:5b:91:64:2c:c1:2e:b5:ea:7e:93:30:
0d:e7:20:c8:08:62:55:1c:f8:7e:bd:31:21:5f:5c:
8c:6f:98:c6:9d:ac:0e:b6:0c:ae:6e:63:bc:21:50:
98:97:74:e9:7b:73:98:11:3e:8e:7f:f1:05:ae:e9:
e0:92:73:13:6c:23:02:1c:1c:2c:25:d8:37:cc:3d:
48:9d:9b:42:e7:d8:53:08:d1:9c:33:75:b1:f1:72:
7f:2b:7f:bf:49:a5:05:89:f4:3a:94:23:0b:24:38:
75:2c:cf:20:de:0c:53:da:c9:34:02:d6:1d:65:ae:
38:76:49:15:43:b8:23:f3:e2:91:b9:cf:8b:f3:9c:
1a:9c:ab:a0:66:2f:ca:7f:a0:99:b3:44:4c:bd:b4:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/58/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4785
138038
sbgp-ipAddrBlock: critical
IPv4:
103.201.128.0/22
202.5.220.0/22
IPv6:
2403:ac80::/32
Signature Algorithm: sha256WithRSAEncryption
76:d9:c5:b2:f0:f8:c4:72:ad:f3:5d:93:07:ca:70:8c:25:9c:
6e:2d:58:4c:64:5b:04:c0:c4:6c:61:ec:2f:90:af:f6:33:c0:
b6:0e:f0:b0:17:c6:3d:a0:99:ab:fd:3f:4d:6f:f6:ef:17:bd:
a9:5c:7b:1c:77:32:7e:52:cf:23:2c:e2:c2:70:d5:9e:06:88:
4c:72:e7:da:8d:b8:2c:5a:40:be:5f:0a:24:ac:5f:3c:5f:c2:
dd:43:7e:45:85:de:15:72:52:7f:1d:9b:11:cc:dc:b9:44:77:
3e:60:6d:28:eb:34:b0:3b:c5:0d:bc:f6:a3:7c:9b:2e:dc:0d:
46:63:7c:06:8b:8d:53:99:d0:b9:a3:a2:54:f9:b5:82:d5:19:
86:0b:0b:a5:43:44:3f:fb:2c:e8:1a:20:8b:06:a2:56:16:7d:
26:fd:0b:c4:3a:95:ea:31:63:8a:47:5d:1e:ff:8f:cb:f0:7f:
73:53:8c:cb:c3:18:4d:9f:df:a0:1d:45:f4:22:01:1e:99:0d:
5d:c5:ca:e7:d3:9f:1a:2b:c5:0b:d0:ea:6b:9e:fa:9c:28:98:
39:0c:39:50:3c:96:cd:4f:cf:9c:81:da:40:d7:17:b8:ed:60:
e3:0f:3e:fa:ea:8f:93:d4:a9:90:de:63:42:65:ae:a8:bf:a8:
a3:ea:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:49 2026 by rpki-client