Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
File: cA9SATINxKfw-nMFyVWhmUwYJgA.cer (raw, json)
Hash identifier: yoMRv1XmbMe4/Aj863WhEFPHjZZ/RvxGGdaNCO2LS88=
Subject key identifier: 70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029E67
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:06:29 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 2001:df6:93c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171623 (0x29e67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:06:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9151290, serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:27:21:83:cd:b3:4a:1a:24:02:2b:f0:b8:
58:1c:a0:13:43:01:e0:52:74:8b:43:1a:a6:20:c7:
37:4d:c4:7f:2a:5a:bf:88:82:53:9a:74:eb:9b:41:
33:d5:db:75:7d:a1:e7:f0:a0:27:48:2c:92:86:b8:
4f:48:9e:06:fe:0b:64:81:0e:40:be:ff:b2:f0:fe:
a1:78:b7:18:ae:98:08:14:9d:25:87:f1:eb:8b:7c:
2b:2a:60:61:3a:32:93:f8:f6:42:26:02:9c:17:72:
23:43:47:53:a2:d5:2b:70:65:2e:8a:1c:46:81:f5:
97:38:6a:7a:0e:e7:58:bf:a1:55:86:af:85:cd:db:
a6:35:24:88:90:e1:38:c2:2b:35:f9:0d:cc:d0:24:
91:74:99:50:1a:30:13:2e:87:b5:91:db:89:f4:d0:
1d:f4:0b:22:0b:29:d9:32:bb:cd:a7:54:e3:bd:b0:
dd:29:34:6c:db:0d:f6:b2:4e:c6:ff:5d:e6:b4:30:
1b:2e:97:5a:d8:4f:ac:b7:89:26:d6:8d:60:b4:d0:
71:51:53:07:2f:ca:bc:4e:bc:1f:31:28:26:6d:5c:
ed:ca:3a:32:e4:e6:61:b5:b4:ad:12:0d:cf:8c:ae:
87:42:8f:15:f9:96:d0:7b:77:16:ca:30:89:4d:1d:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:93c0::/48
Signature Algorithm: sha256WithRSAEncryption
16:8d:c5:e7:f6:6b:12:27:3b:f3:1e:4a:c7:42:04:12:9f:11:
73:af:85:5f:d7:8d:b5:8c:6e:59:60:b8:ee:02:2f:eb:a8:f5:
d1:09:30:a4:2e:08:f2:de:33:3a:c4:78:22:66:35:a7:7a:01:
87:e6:3f:90:71:e6:f0:00:aa:ba:0c:44:8c:36:5c:1d:13:e1:
35:0b:6b:82:8c:f6:5d:52:15:a4:ee:79:37:c9:ef:bc:09:f9:
b4:14:46:ad:43:05:2f:d0:03:66:6b:c9:79:3c:aa:ab:ca:ce:
98:ce:0e:11:0a:a3:cd:b2:4a:9e:9a:6a:2b:12:1c:63:4f:fd:
6c:b1:54:ec:9f:37:48:82:80:bb:29:41:03:6f:da:ba:b5:b2:
0f:11:33:e2:e7:51:e6:0e:f8:55:74:e5:14:de:e1:c2:60:e7:
c1:ff:57:f2:01:b2:f3:4a:4d:a8:b0:56:51:b0:e2:3e:d3:c4:
57:c8:c1:fb:c6:d0:cc:b1:ae:14:c4:05:29:45:03:fd:12:04:
d6:0f:49:68:d0:d5:98:95:4b:a9:98:87:c0:f3:0f:23:8a:a1:
11:c8:0f:14:1d:7e:ec:c5:c6:17:80:99:b6:09:b1:9b:c3:5b:
26:55:8c:84:c0:1b:87:06:5c:7c:be:95:c0:a4:ef:19:9a:41:
fe:f8:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:48 2026 by rpki-client