Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
File: cXGYzRpGea2dRS7h2wLQASpDdOw.cer (raw, json)
Hash identifier: v9CbccH4ZDgtw+Nun0tmG7jvuul86nDyGzBB18MKSD0=
Subject key identifier: 71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AAA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Apr 2026 13:20:59 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 163.61.250.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174761 (0x2aaa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 7 13:20:59 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9169F49, serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:45:18:71:21:eb:2c:7f:b5:2c:3c:47:b7:
12:87:3d:3d:59:e2:59:12:86:7c:0f:9b:33:cc:a7:
6f:b4:cc:fe:3c:03:22:9b:82:45:fa:d0:ed:45:0b:
49:bf:9e:f2:7d:a2:98:10:f1:cd:20:96:b1:1d:1a:
7b:32:c3:92:de:a9:bc:3a:27:8d:bf:27:dd:1f:a4:
c4:1d:8e:00:e7:07:02:3e:7b:32:7a:f1:27:43:f6:
c7:87:4c:57:38:ad:cc:7d:9e:e2:ef:5c:29:6c:a2:
55:d7:b1:1e:20:2d:ac:96:2c:dd:30:7e:bf:ca:23:
ca:b4:5f:cf:11:2d:63:87:25:63:82:66:d6:90:ac:
8f:fb:53:b2:5c:b9:15:5e:48:6a:9c:cc:a7:dc:c9:
c9:26:f6:be:82:be:df:f4:3e:51:2e:ea:0e:df:aa:
04:f2:c2:0e:1d:e2:52:be:10:b3:42:2c:f4:97:1a:
6a:f2:4c:f7:7f:72:2b:30:03:1e:74:a2:b8:87:e7:
7c:cf:b6:ed:d3:2c:15:ee:42:30:1e:4d:b0:84:73:
e2:49:7d:5c:78:7d:6c:38:6e:b0:a8:30:8a:63:0d:
1c:8f:02:47:64:7d:e9:b9:d7:d4:38:72:02:99:66:
c4:b8:d2:31:c2:39:a4:99:91:42:1d:76:d5:bb:f2:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c1:58:9d:9c:2b:c5:a2:d6:4f:62:dd:1d:f9:c6:9e:be:9c:
dd:c6:e8:18:31:8d:d7:84:51:74:10:a7:b4:a5:88:f9:be:b8:
3b:ba:82:ca:6c:4f:fd:9f:6f:c9:a5:81:3e:23:d0:43:f4:b3:
2b:22:1d:a8:8c:0a:78:5a:96:15:29:d0:45:7d:bc:17:11:7d:
39:57:4a:99:01:61:71:26:d8:dd:5c:62:73:46:ee:47:1f:5d:
01:4d:04:94:b9:f4:6c:4a:3e:e1:21:71:12:4b:12:0c:d8:8b:
e2:e2:fe:0c:37:5f:a2:a5:62:f6:19:52:86:a3:2e:b0:20:c3:
ac:35:5d:d9:74:77:82:f1:88:da:fe:16:68:23:e1:59:20:7f:
67:82:2b:c9:ca:73:27:47:1f:53:11:94:71:4a:64:f4:93:be:
0f:fb:11:2d:e4:72:cf:66:5f:1d:a9:9f:29:b1:eb:bb:0a:88:
66:ae:6c:6c:b3:7a:71:bd:c9:8c:10:50:4f:37:46:25:e0:0a:
18:eb:a7:d8:d5:94:85:e8:43:a4:95:7b:d3:6a:7a:3a:a7:aa:
ac:c2:42:d5:9c:1a:f7:32:c5:e8:dc:98:f7:cb:62:ab:ff:3a:
95:d2:9f:cc:78:7c:69:1c:53:b0:c5:b4:e2:70:15:2f:f9:9b:
2d:cb:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:05:13 2026 by rpki-client