Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer
File: XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer (raw, json)
Hash identifier: ZWXClrOUBsmUitkrImlmFE6p3ZCZoj16TmgYuLVJgEU=
Subject key identifier: 5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D055
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Aug 2026 08:34:41 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 139465
IP: 203.8.22.0/24
IP: 203.32.65.0/24
IP: 2001:df1:a80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184405 (0x2d055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 27 08:34:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A918D584, serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:2e:12:04:55:71:11:f4:f7:0c:01:e5:9a:
33:88:11:25:37:7a:bb:83:d3:13:16:16:ed:5c:4f:
97:c9:78:e7:96:7f:f0:2b:1f:79:19:72:18:70:01:
76:46:43:51:cc:2a:0a:7c:8a:90:94:4c:e8:44:d5:
24:2e:89:3d:e8:07:d0:70:83:72:23:17:72:fd:cf:
78:f9:f4:ec:24:5e:c3:67:9a:d5:52:9f:fe:7d:37:
21:ac:28:ad:da:f3:0c:57:4b:8b:b1:26:2d:91:a3:
24:53:af:c1:42:af:f2:69:c9:fb:b3:5d:53:f6:0e:
c3:b8:98:d9:7c:c6:ea:1a:0e:fc:bd:68:b4:5b:4d:
f1:75:03:88:83:9a:50:4f:4b:e5:18:01:4d:e4:a8:
d8:9c:58:82:b1:05:27:b1:95:1b:c3:88:17:c1:35:
78:d0:ff:af:cd:93:96:56:ae:2f:1e:f3:37:ed:0c:
57:c1:e2:f9:11:ed:44:94:2d:12:19:4b:58:58:c7:
76:10:f6:17:4b:75:d1:b2:7b:3f:eb:24:2b:47:7b:
b9:f9:ec:69:0d:b8:64:4e:bb:2c:6e:72:6d:f6:b4:
02:5a:19:3f:cb:2f:1f:da:35:55:74:73:4d:ce:1d:
9e:fb:94:92:f7:d3:97:35:44:0b:19:1f:ab:04:92:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139465
sbgp-ipAddrBlock: critical
IPv4:
203.8.22.0/24
203.32.65.0/24
IPv6:
2001:df1:a80::/48
Signature Algorithm: sha256WithRSAEncryption
8f:7f:6b:1e:f8:fc:15:12:bb:3b:6e:0b:10:31:13:32:02:9c:
57:5a:2d:58:f0:5e:2e:6d:c9:f1:4e:de:85:1d:fd:60:ed:75:
6e:bf:76:d4:49:5b:af:0e:f5:fb:ef:99:29:08:29:e4:62:e6:
d6:72:0f:71:24:94:17:04:f3:76:ae:87:eb:a9:00:f2:5e:62:
59:04:09:12:83:74:fc:49:50:51:87:87:d7:56:87:90:18:5d:
e4:9a:0a:66:f7:ae:b3:68:6e:b9:e5:52:9c:c7:34:b4:41:e2:
9b:fa:3f:d1:13:9e:da:e7:0d:69:42:24:01:a6:61:f6:49:56:
a1:f1:67:5e:08:ba:ae:d2:b9:8f:9e:7d:29:11:0c:19:0d:6c:
fd:95:38:09:81:73:29:23:48:cb:ce:74:ac:26:55:73:a8:1c:
43:f3:4f:44:7e:90:2e:ce:e3:c0:59:b5:4f:68:21:2a:5f:20:
cc:d7:8a:3d:5b:bc:39:b4:8b:4a:94:48:e8:37:34:09:f7:8c:
6a:29:eb:3d:ad:c5:e0:42:0b:fc:92:d4:b3:a3:f3:5d:14:16:
a8:f4:67:90:9a:ff:dd:22:86:5a:1e:be:68:66:09:83:c9:1b:
9c:1c:ce:76:1f:50:c4:9a:bb:a2:a2:d7:62:6a:11:93:8a:9f:
69:3f:0d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:47 2026 by rpki-client