Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
File: XDlbosoKv2WIhyaHTHgktpt4mZU.cer (raw, json)
Hash identifier: tZrxNyKTSaA+v0zn/6E7uUHLb0Cg35flMY0tao+9VWw=
Subject key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A6A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Mar 2026 14:41:25 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.135.56.0/22
IP: 2404:75c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173732 (0x2a6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 26 14:41:25 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:7a:58:e0:ee:2d:0c:4b:15:0f:cb:e7:9c:
61:67:13:d5:c5:4c:66:74:29:ed:ce:ae:3f:f5:50:
ba:1c:4b:f6:73:60:a7:d4:98:fc:9c:c2:76:5c:f6:
e9:7a:60:92:53:3f:e7:24:51:cb:b7:90:22:15:da:
cc:25:8a:c1:bc:d0:98:9c:3f:a5:39:40:b4:c8:12:
1c:e8:d8:eb:16:5e:9c:8f:90:68:ce:41:82:21:93:
93:3b:2c:d1:e4:24:2c:ed:14:06:d6:80:7a:8a:e7:
3d:b8:2f:19:90:6d:31:f2:2f:30:39:d9:16:e3:22:
bd:97:b4:49:e0:2c:cf:ae:d3:79:d8:64:14:b8:b4:
c5:44:6d:c9:3f:8c:9b:1d:f9:9a:2b:05:89:fd:1c:
f1:02:3e:51:a0:c5:18:64:7b:95:55:be:38:75:08:
73:1a:74:6c:fc:a2:a9:b2:2a:30:03:bd:ac:e2:da:
22:95:36:0d:90:cb:d3:67:e0:19:01:ca:4a:c7:0f:
8d:14:37:2f:3b:2e:5b:35:af:be:0c:af:95:05:4c:
ed:f8:e6:e6:94:07:7d:8d:ae:52:dd:58:dd:85:d5:
17:56:d0:a3:de:09:be:96:95:84:0d:75:98:5b:02:
8f:7a:27:e2:a9:9e:b1:e3:be:7e:0b:9e:b0:d1:46:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.56.0/22
IPv6:
2404:75c0::/32
Signature Algorithm: sha256WithRSAEncryption
87:1b:e2:16:b6:fd:86:40:60:10:2a:19:4f:0f:e2:b7:06:da:
4d:1d:36:44:b2:0e:0b:b0:bb:b9:5b:bf:95:50:2e:87:99:7b:
74:67:2c:e7:bf:d3:00:89:e0:c8:99:7c:98:20:7f:54:ce:d9:
9e:09:7d:b0:8e:56:a0:e9:cd:c8:59:71:f2:97:a9:2a:42:b4:
a2:fe:3b:b1:6a:c0:1f:15:c5:5a:9b:72:a6:ac:7d:36:8b:ea:
17:90:1e:6c:9b:66:4e:69:3d:96:4b:ae:76:5f:9d:83:51:72:
48:48:f6:c3:b5:10:2a:6b:fe:d3:9f:8e:2f:74:0d:ff:a9:65:
72:8c:d5:51:de:4f:e4:98:72:c7:dc:fb:69:c9:f7:fc:14:96:
07:73:2c:0e:d2:bb:ae:f9:c9:e1:21:f4:9a:65:6c:7b:db:c8:
01:38:47:e0:9c:b2:d7:0e:a4:4d:5f:11:f9:2a:12:1f:c9:b2:
6c:54:ef:56:f9:eb:66:03:03:f4:69:80:8f:0b:fe:97:b1:26:
13:8d:f0:11:8a:55:4b:89:1e:6f:90:1c:3c:02:73:4d:0e:fc:
f5:b4:27:90:a0:e2:11:2e:fc:49:58:a4:26:1c:75:7a:84:39:
7a:cb:03:0a:a9:0a:28:1d:1c:ab:e4:f4:9d:b2:ea:2f:cc:5a:
0e:7a:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:34 2026 by rpki-client