Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
File: aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer (raw, json)
Hash identifier: 9EXHG2t7gzkRD/3jqtrw/nBE2HnDTRMWmqiRPjx/yO4=
Subject key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0298BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:40:54 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.204.4.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170172 (0x298bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:40:54 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:4e:98:f4:3a:96:e4:ce:c2:99:c7:a8:79:
36:64:43:d4:a7:21:e6:2c:a0:84:34:8d:42:5b:08:
ee:0e:d3:52:15:0d:95:07:95:fa:5a:6b:78:af:38:
a8:82:8b:6e:1e:17:97:be:f7:7a:38:14:82:30:07:
bf:67:f8:b3:d4:df:43:65:57:19:4c:6d:7a:6f:22:
67:f3:fa:6c:1c:15:b7:bc:93:5f:02:dc:dc:5b:93:
94:b6:24:d8:8c:61:57:7a:89:89:0b:18:14:7b:ec:
48:f3:f0:64:1d:47:43:fe:ee:6e:03:a7:1c:a0:70:
38:7c:93:bf:ff:21:3a:cc:47:75:1e:46:7c:fa:76:
92:66:f9:41:c9:62:5a:9e:ee:9d:e8:87:cb:b8:08:
2f:06:b0:fb:40:50:79:06:fe:bc:ed:7f:dd:37:07:
cf:67:d5:bf:83:34:b8:99:80:88:67:94:38:0a:6a:
3f:b8:a8:55:81:3f:ed:dc:0d:28:0f:98:dd:33:86:
e8:cb:d2:d0:53:65:bf:72:0e:91:c8:a5:79:48:4b:
b6:48:fb:d4:b6:68:37:89:73:20:3d:ce:90:64:14:
3d:04:b0:40:d2:1b:52:a8:18:79:9a:61:d2:a9:75:
90:42:05:44:b1:20:e2:11:42:0c:ad:0a:e2:92:70:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
28:68:48:c8:4c:5e:f5:be:82:39:50:ea:21:29:b2:c1:82:c9:
04:e1:1a:e9:e6:75:5b:c2:51:be:7b:b1:32:07:28:85:78:ce:
8b:e7:7f:6a:f7:f8:14:a6:5c:29:50:eb:7b:b5:13:c0:48:ef:
d3:f1:b3:6c:62:47:08:66:87:b5:04:e6:7f:7e:98:60:04:80:
d3:53:76:5c:00:87:63:d8:f7:73:9a:4b:d9:0f:14:99:fa:18:
6d:c2:a0:80:4a:53:35:9a:8a:17:77:00:c4:63:e5:3e:ad:1d:
c3:6a:71:7c:42:a6:42:0b:28:2e:2d:fc:f4:df:67:e3:ae:80:
9b:8c:fa:95:bf:e8:6a:6f:46:a6:0e:c3:8d:13:ff:c5:43:1e:
b4:20:a4:6f:75:a2:aa:3d:bd:db:40:f6:b7:93:aa:9d:95:76:
26:41:ef:f4:8c:34:a9:84:56:93:4a:bd:02:ad:26:cf:b2:e5:
88:4d:6b:19:8a:38:b3:8a:c1:85:fc:15:bc:ac:3e:b1:71:aa:
30:38:3f:f3:06:b7:77:3b:f7:81:7a:61:ae:48:4e:5a:aa:e4:
a4:86:da:b1:e0:a0:f9:45:3e:40:8a:32:01:a7:ab:50:36:fa:
87:c7:aa:a1:3b:f1:f3:98:3b:4a:39:82:e3:80:c8:04:9c:4e:
9d:c6:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:53 2026 by rpki-client