Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer (raw, json)
Hash identifier: MPSl/UdZJxxlS5O1jlHguB8vxOIkqJMwJHuZ9tvWcsw=
Subject key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02978E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:35:34 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 132857
AS: 141233
IP: 43.243.56.0/23
IP: 103.156.230.0/23
IP: 2407:2b00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169870 (0x2978e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:35:34 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:07:5a:3d:b1:92:79:21:07:3d:b4:b6:3f:
86:e3:fc:f8:fb:0d:3c:c7:45:52:13:e1:78:56:7c:
ba:02:c0:a3:38:84:4a:7d:78:81:6d:ac:7e:33:96:
39:1e:02:37:ba:a1:08:f3:1c:d5:9e:42:62:cb:8e:
c0:8a:70:10:73:10:73:24:e5:e2:1b:c5:9d:79:61:
8a:7b:f7:93:d4:8c:cd:16:df:5c:09:ca:c0:61:17:
76:57:b5:03:c2:fd:75:f5:b2:28:83:86:02:f2:bc:
f3:62:6f:39:00:89:5a:fe:31:2a:ea:fd:fa:42:f1:
c8:33:0d:c6:35:d5:59:ad:8e:f6:e9:81:7c:26:1b:
fd:0c:d6:0b:c4:5c:cc:a4:72:6b:05:34:a0:5f:47:
ba:9e:bb:0b:eb:61:d8:60:35:96:21:8e:88:47:ad:
5d:a9:7c:62:c4:78:97:d0:17:55:c2:05:4a:20:6a:
b9:c7:aa:d2:83:4d:12:33:f4:56:42:e5:c0:36:d5:
c8:d0:e6:ce:ed:9e:71:99:9e:77:e2:65:e3:48:ee:
a9:99:80:86:14:d5:29:22:2b:d6:49:d0:8f:a7:e9:
92:fb:42:2b:8c:0c:37:0f:19:df:60:c5:99:6a:c6:
c6:1c:c0:65:a5:17:5d:0c:bc:14:f3:5a:5c:e7:5d:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132857
141233
sbgp-ipAddrBlock: critical
IPv4:
43.243.56.0/23
103.156.230.0/23
IPv6:
2407:2b00::/32
Signature Algorithm: sha256WithRSAEncryption
83:06:fd:18:6b:db:a8:dc:de:19:d3:f3:54:aa:d4:32:f6:00:
d9:31:56:3c:7e:8d:dd:47:14:fd:65:b7:b9:c8:4f:e9:0f:47:
1e:0b:49:39:10:29:31:a5:9e:8e:fe:23:2a:61:e2:1f:3e:4c:
fc:d0:37:e4:02:ee:7d:c5:82:48:19:18:29:aa:f9:d5:09:40:
6d:58:a9:fc:fe:20:ba:a5:49:ce:ef:0c:21:d3:77:ac:42:36:
aa:a0:4d:f1:2b:e3:34:60:b8:7c:37:65:28:d7:d0:1f:d0:8f:
ae:0b:2c:77:a3:8d:ac:5d:07:48:69:20:cd:3e:94:3a:b2:b9:
ff:a5:af:c5:b2:71:8b:5e:04:6c:21:78:90:f3:21:a2:56:f7:
d8:b5:bf:19:3f:5d:e1:c4:b0:5d:b0:83:c8:5d:4a:5e:40:88:
2c:01:a0:f1:d7:72:a0:46:79:6f:44:7a:85:03:b7:6d:26:35:
a3:64:fc:38:1c:00:3a:40:95:04:2f:53:b0:60:4b:49:c7:7b:
12:06:b1:eb:3b:62:7d:9a:74:45:fb:2c:9a:3e:69:79:c2:f3:
63:d6:af:df:c5:e4:36:5f:d7:6b:b1:71:4a:29:ea:1e:21:76:
2d:76:e3:d0:8d:7c:a5:ea:f9:36:fa:4d:54:26:dc:e7:01:fa:
93:63:04:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:06 2026 by rpki-client