Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
File: d4SIFI464vFK1AhU96L6WVd1xXU.cer (raw, json)
Hash identifier: BIb4L1pLfZHxzjgr0kNASvxlsxJiX9Lq12voBP0zWAA=
Subject key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF80
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Aug 2026 13:46:00 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 9652
AS: 133614
AS: 133620 -- 133621
IP: 27.127.192.0 -- 27.127.239.255
IP: 202.3.96.0/20
IP: 203.22.70.0/23
IP: 203.29.180.0/24
IP: 203.55.38.0/24
IP: 203.55.158.0/24
IP: 203.55.254.0/24
IP: 203.201.128.0/19
IP: 2400:6880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184192 (0x2cf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 13:46:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:94:00:fd:88:46:54:c8:a8:79:4e:dd:9f:
4f:cd:df:2b:ca:16:ee:7b:d7:6c:56:00:e0:99:1c:
f1:df:bb:b4:69:0f:5c:c3:2e:a1:67:00:2c:80:38:
ae:51:6f:74:92:1d:6c:00:29:cb:78:e5:63:62:4c:
98:ae:d9:20:b4:82:cf:bb:f7:ee:9b:86:1a:1b:5a:
a6:0a:ec:75:13:73:a8:9e:1f:a8:a9:55:25:75:3c:
9d:a2:94:78:23:ef:8d:9a:29:0e:a0:56:bb:83:3e:
30:d7:b1:c9:e8:26:2a:c2:91:58:00:a9:c6:d2:2c:
a6:82:72:57:c4:35:19:50:9b:9f:47:7e:cf:7b:b7:
b8:d5:6f:cb:1e:14:bb:a6:c7:86:89:ab:67:71:40:
b6:a1:a7:c2:7f:6a:ff:40:17:31:75:dc:c4:74:3d:
e6:c2:ad:73:b9:26:62:12:52:13:3a:c8:4b:e3:bd:
f2:89:8e:37:d7:c5:de:a6:94:63:74:7a:5b:bd:d2:
d2:1c:63:1a:2d:50:ef:a3:27:c4:e0:b5:e0:ef:66:
53:bc:9c:ef:42:ea:d8:a6:6f:67:41:a7:c5:df:82:
09:de:1c:17:da:77:33:e8:1c:3f:13:01:8f:7c:2a:
3c:c4:20:4d:68:39:4f:69:36:05:9e:f9:6c:63:80:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9652
133614
133620-133621
sbgp-ipAddrBlock: critical
IPv4:
27.127.192.0-27.127.239.255
202.3.96.0/20
203.22.70.0/23
203.29.180.0/24
203.55.38.0/24
203.55.158.0/24
203.55.254.0/24
203.201.128.0/19
IPv6:
2400:6880::/32
Signature Algorithm: sha256WithRSAEncryption
00:33:5f:24:93:4c:cb:29:b1:b2:a6:d9:f3:94:7a:e8:f9:ab:
1d:16:9c:69:1b:d8:18:cb:73:aa:49:f3:50:39:c3:3b:0b:3a:
32:85:7d:82:6f:35:4c:74:ea:18:79:ae:26:a9:a5:8b:b6:65:
ce:89:5d:78:93:e3:94:be:a1:c9:c0:73:3c:d6:a6:1a:69:14:
66:65:8e:91:26:78:b4:14:cd:3e:0a:c2:1d:10:ef:00:78:70:
fb:ec:1d:23:ab:55:fe:0d:5e:e1:bb:ac:b5:48:44:7b:cd:96:
8e:27:8c:44:9a:d1:ba:c9:7f:28:35:67:a4:15:a7:a3:87:30:
6b:dc:6e:2c:a6:54:0b:1e:80:76:cf:0b:5e:43:32:ae:be:23:
bf:8a:56:40:9b:67:dc:87:38:c7:6b:15:90:86:07:8a:ce:2d:
03:c6:9b:5d:e0:47:01:2d:bc:01:0f:60:3a:f0:1d:0a:b2:cf:
0b:7e:c1:8f:ff:4b:4f:8b:91:e0:01:2a:dc:5b:ca:34:f3:5e:
94:bb:2d:ab:8d:94:98:e1:b8:63:73:a4:d4:1e:94:60:59:74:
a5:dc:8e:3f:6c:38:3d:d7:00:1e:31:a0:5c:6d:1b:80:bf:42:
19:cf:a0:72:7e:49:ec:61:a5:51:01:e4:fc:92:ce:f5:bd:e2:
ec:c4:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:14:31 2026 by rpki-client