Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.cer (raw, json)
Hash identifier: z8j5+ljXQIV3RS69CvqONvnKOjgyASrCUPMGzmyUcDg=
Subject key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0296F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:32:16 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 202.14.66.0/24
IP: 203.0.123.0/24
IP: 203.15.65.0/24
IP: 203.19.102.0/24
IP: 203.32.106.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169712 (0x296f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:32:16 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:da:d3:2e:90:f4:13:38:c4:93:ed:80:a5:
4d:3c:31:eb:e1:8a:36:ca:b3:85:10:ab:f8:0d:8c:
91:27:e6:0c:2c:81:d3:cf:e5:fb:8b:39:10:cd:5f:
d6:9b:62:a5:6e:5c:26:8d:39:9a:97:23:d2:33:e9:
a4:e4:10:97:81:03:97:f1:20:fe:6e:69:37:b0:7c:
b1:96:12:12:27:03:bb:94:74:6e:1a:63:54:0a:eb:
1f:dd:27:62:9b:a9:17:f8:57:ad:52:40:a9:6e:de:
e8:d8:f9:fb:74:e3:21:e7:e0:a3:b8:01:fe:e0:b1:
21:db:10:d7:ad:f5:9a:74:28:97:b4:dc:2e:ea:6f:
65:eb:a5:fa:7a:e9:f0:d6:fd:95:da:53:a4:bf:97:
67:34:8d:9d:e7:c7:76:f7:8e:8d:3b:3e:47:9b:fa:
a2:f3:57:61:73:7c:15:df:f1:6d:db:7c:86:84:b8:
b6:6d:d4:97:1c:c2:49:80:95:73:b4:54:ae:df:da:
63:3f:6c:63:78:98:ec:b4:a1:4e:cc:1b:62:21:39:
67:45:0e:0f:fc:b3:8c:84:ba:c3:31:25:80:62:90:
ab:64:19:ac:b4:97:43:04:be:a4:b6:62:02:6a:49:
99:cd:80:ac:00:24:a7:ee:be:af:e0:c3:33:1a:bf:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.14.66.0/24
203.0.123.0/24
203.15.65.0/24
203.19.102.0/24
203.32.106.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:63:19:1a:e3:88:20:b3:d5:67:ac:ca:08:f7:2a:fe:e3:e4:
e6:19:cf:40:2b:21:40:e0:9d:40:ca:94:e9:6f:c9:12:7e:43:
29:93:52:17:0a:eb:62:66:09:c2:42:24:8e:38:8d:03:0b:9d:
e8:f1:7d:97:36:0c:79:6a:a4:a5:65:6b:86:7e:a8:ff:7d:c7:
67:e2:69:2e:e9:b4:7f:04:69:85:3b:4d:31:7b:72:49:19:a0:
ae:6b:95:77:1f:7e:75:39:26:79:ae:19:52:7d:d4:0b:dd:c7:
d7:62:66:95:5e:85:6c:41:c5:b8:53:56:04:01:95:84:2d:84:
fc:44:79:e9:9a:b7:db:0c:55:a0:77:36:78:7a:e7:1f:66:c6:
46:43:fb:35:d1:b0:de:08:9f:47:a8:3c:4c:e1:53:53:09:a8:
21:b7:c9:64:9f:05:b2:80:9b:fb:b7:04:95:5c:07:2b:4d:c6:
a3:43:24:f5:39:49:56:d9:49:b8:b5:53:03:9c:f3:15:8a:71:
08:88:c4:dd:ea:60:79:f3:35:50:af:b5:c3:11:6e:2e:a8:5a:
23:93:5d:80:63:cb:01:df:0f:7b:22:9e:27:f7:59:df:f0:6d:
0d:a9:c9:c1:2f:5c:be:78:7f:16:4d:ca:d4:fd:dc:db:48:fc:
9f:8f:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:19 2026 by rpki-client