Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.cer (raw, json)
Hash identifier: DuhwBwS2qtpiE3SpjKNJO0w0fFggWChQDMlelkuArjg=
Subject key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ABA1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Apr 2026 12:31:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 9280
AS: 17462
AS: 18345
AS: 23670
AS: 24113
AS: 24238
AS: 45261
AS: 45425
AS: 45671
AS: 56225
AS: 131229
AS: 132324
IP: 27.50.64.0/19
IP: 27.111.80.0/24
IP: 27.111.85.0/24
IP: 27.111.87.0/24
IP: 27.111.90.0/23
IP: 43.242.68.0/22
IP: 43.250.204.0/22
IP: 45.65.12.0/24
IP: 103.2.196.0/22
IP: 103.11.52.0/22
IP: 103.12.8.0 -- 103.12.10.255
IP: 103.13.100.0/22
IP: 103.13.186.0/23
IP: 103.24.14.0/24
IP: 103.227.28.0/22
IP: 103.235.52.0/22
IP: 103.248.189.0 -- 103.248.191.255
IP: 103.255.249.0/24
IP: 114.141.192.0 -- 114.141.203.255
IP: 117.20.0.0/20
IP: 117.120.8.0/21
IP: 118.127.0.0/18
IP: 163.53.232.0/22
IP: 180.92.192.0/21
IP: 202.51.160.0/20
IP: 202.60.64.0/19
IP: 202.125.32.0/20
IP: 202.130.32.0/22
IP: 202.131.88.0 -- 202.131.94.255
IP: 203.26.196.0/22
IP: 203.28.51.0/24
IP: 203.56.250.0/24
IP: 203.88.104.0/22
IP: 221.121.128.0/19
IP: 223.252.0.0/18
IP: 223.252.96.0/20
IP: 2400:8100::/32
IP: 2400:d400::/32
IP: 2403:b800::/32
IP: 2404:5300::/32
IP: 2405:1000::/32
IP: 2407:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175009 (0x2aba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 12:31:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:d8:2f:ef:02:0c:ca:69:b2:a7:c1:2a:25:
ec:2e:58:4f:36:d2:a6:0d:50:a1:61:3a:6a:65:54:
18:2a:bb:ea:98:4d:5f:17:8a:3b:95:74:36:ef:c7:
06:77:22:b2:a8:d4:72:99:bd:83:12:0b:1f:9f:85:
b7:4e:0f:4a:22:a2:a3:59:2f:ee:f1:ad:51:41:16:
0a:ca:8c:8e:61:88:de:6e:71:ed:ba:ce:ba:c6:c2:
16:0e:24:74:e2:6e:be:fc:77:c5:9b:ec:e1:36:50:
e8:17:d1:ec:73:7d:06:6b:ba:e5:94:a0:28:ce:db:
5a:95:94:b5:24:69:7d:d1:6a:17:fe:9f:85:0e:8c:
f9:56:e5:d3:22:db:06:63:99:51:97:8e:35:6a:78:
4b:27:54:92:f2:ab:32:fa:8d:f5:f8:72:05:74:47:
be:b6:67:8d:97:12:70:f6:1b:f0:3e:3e:e2:35:b6:
24:ae:cb:a7:84:de:4b:06:a1:9d:95:2a:e3:05:4b:
fa:90:b2:90:57:3b:73:03:9e:57:af:cd:21:53:ce:
47:58:27:e0:e4:49:b8:1b:ec:36:25:48:29:c5:8d:
5e:cb:73:95:f8:7e:52:40:39:14:fd:cd:de:86:f2:
f0:a3:f8:27:2c:eb:ee:1e:45:cb:9e:64:fc:e0:ab:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9280
17462
18345
23670
24113
24238
45261
45425
45671
56225
131229
132324
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.51.160.0/20
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
203.56.250.0/24
203.88.104.0/22
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400::/32
2403:b800::/32
2404:5300::/32
2405:1000::/32
2407:2200::/32
Signature Algorithm: sha256WithRSAEncryption
a9:b3:e1:ce:42:6b:8e:18:9c:b3:5e:84:8d:c1:a7:cc:2b:c0:
94:d1:d0:5c:78:60:6c:50:3c:8a:b3:06:0e:47:6c:12:4c:15:
50:c7:8f:b8:9c:c4:a3:e0:34:58:c1:b4:03:f6:8f:ed:36:db:
d6:6d:95:03:0b:7d:5a:88:e1:d4:6a:e4:ad:94:91:8c:72:f5:
74:32:04:b5:38:dd:f6:49:78:a8:fe:dc:f6:06:85:49:24:73:
f1:31:49:f7:0e:d2:b8:cb:93:a0:39:6e:b1:d0:75:7d:1b:1c:
f9:67:dd:d3:5f:6e:14:36:e5:2d:3f:ef:39:3a:11:5c:15:82:
4a:f5:4d:d1:30:23:70:5d:28:ed:4d:b4:b3:6e:96:66:b2:00:
32:d3:af:03:7d:92:b5:62:51:3a:da:53:28:44:66:d2:5d:4a:
5c:9c:49:ae:3a:d2:4f:e7:35:8c:b8:77:79:0e:67:3c:a4:2f:
72:f3:fb:88:be:47:75:a3:6d:2c:ab:05:4a:bb:a0:39:5f:98:
f4:40:ba:03:bb:d5:99:18:e7:8a:a0:d9:4e:88:d0:e0:ec:6e:
86:15:bc:4a:04:63:e9:1a:2a:a1:44:fd:20:46:66:b3:bc:3c:
6c:f8:c5:36:b3:93:fe:f0:f9:15:21:b1:1b:5e:85:30:3d:bf:
03:95:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:12 2026 by rpki-client