Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
File: c5C6Rl4CIu4xQH5VCebenj-pENs.cer (raw, json)
Hash identifier: 97d8bCsyLNTmT1qYrbfgKbiTqt8Ro0Yj6hOTeXHM150=
Subject key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029E21
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:05:18 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 103.175.192.0/23
IP: 2001:df7:fb80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171553 (0x29e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:05:18 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:bf:a2:8f:fa:8c:08:01:64:fb:a4:71:bb:
d4:28:ab:80:1d:b0:bb:33:5e:fe:66:a2:9c:58:37:
70:61:89:99:76:0b:22:af:04:59:d1:b6:76:0a:d3:
ca:93:d7:fd:b5:d8:0a:cb:fb:ff:e5:e1:3c:72:82:
5e:e0:46:d0:a5:64:e0:3a:71:a7:13:35:e8:8b:ce:
51:de:66:db:65:7e:2b:6f:68:5b:3c:d0:0f:47:fd:
73:87:7d:5f:99:97:36:83:f9:dc:51:36:d0:f6:3d:
0f:40:72:1e:fc:91:7b:c0:85:05:c5:c6:eb:aa:ca:
c7:9a:7a:0e:ff:3f:9e:5f:c8:33:de:77:db:d4:10:
68:69:55:5c:2b:98:db:92:79:a6:da:a7:93:e7:8f:
e5:52:05:e7:a9:e8:d2:0f:ee:8c:0e:d7:03:9e:ce:
f1:78:96:f9:f3:b9:7d:34:d2:92:45:64:94:a0:32:
ac:f4:96:24:92:1d:5a:a3:d0:e1:55:2f:35:75:9c:
69:d1:12:f0:73:6b:37:73:64:6d:ae:09:b5:96:fb:
73:a5:19:cb:8b:df:73:cd:7c:0f:aa:12:de:55:d1:
f6:d6:07:50:e2:62:d1:80:66:5b:6d:9b:83:3d:56:
36:0f:78:4f:3d:36:56:c5:62:a7:42:ad:5e:89:2d:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.192.0/23
IPv6:
2001:df7:fb80::/48
Signature Algorithm: sha256WithRSAEncryption
9f:db:16:dc:28:59:e3:ba:1b:09:35:97:4f:26:a5:9c:b9:81:
40:b9:38:23:fb:2f:d2:8e:91:21:63:44:48:8e:57:fa:87:5c:
b5:32:18:c8:7b:55:8c:06:ea:80:61:46:bc:a4:61:8d:4f:0e:
7b:ad:ca:3f:ba:e8:f7:1f:1b:6d:47:e8:47:4e:30:1c:b3:c9:
62:ab:b6:c7:6c:50:08:d7:1d:cf:0d:6e:73:ef:ce:36:df:81:
9c:24:28:71:27:20:e7:b7:94:95:a9:ed:ca:c1:e4:68:08:40:
18:12:29:6d:fd:78:a0:0c:cf:d2:e9:b9:e3:85:24:e1:58:c0:
ed:86:5e:08:45:90:bf:c8:a7:52:0e:36:cf:87:86:d6:ec:7e:
7b:4b:c5:78:79:5c:9b:5d:82:fa:46:8d:a9:6e:4d:7d:8f:df:
35:45:b4:3a:5b:3e:20:df:45:07:69:bd:18:e9:a8:0d:15:5d:
04:b1:a0:52:25:f5:95:74:78:eb:8a:f5:b6:4a:1d:43:23:aa:
e4:9a:4e:10:bb:66:51:a0:ef:38:d9:b2:9d:1a:ee:a7:13:a6:
17:99:77:9f:67:16:5f:d6:64:e6:53:3e:ec:20:10:65:0d:fa:
e9:96:6e:c4:09:c9:6f:99:67:7f:e5:f1:47:5f:0f:2c:97:4a:
c8:a9:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:23 2026 by rpki-client