Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
File: gFLXiRiFOIg0vD1ozrIclvdiXmc.cer (raw, json)
Hash identifier: Ng0q+Buyyq/gIAGEhfcLfg5Ot7abBIp0i/OwqFVUuuo=
Subject key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C0E8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:21 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 103.248.97.0/24
IP: 2001:df0:a000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180456 (0x2c0e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 14:41:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:98:fd:a0:ee:7b:53:08:07:20:63:cc:d2:
27:5d:36:33:e3:d5:b5:11:86:86:f5:7c:a0:72:e2:
d8:cd:33:0d:ed:ed:0f:0d:e4:28:ee:dd:89:de:15:
9e:2a:a6:ea:6c:00:9d:17:40:f3:db:90:b9:5d:fd:
f4:26:b8:e1:4e:b5:22:42:98:ce:f6:67:35:ee:05:
c3:df:a0:8e:06:d9:9a:d1:64:78:99:ab:e6:0b:dc:
d7:24:24:6d:b7:e4:64:cc:84:1a:96:e2:b1:5f:fc:
2f:3d:21:91:d9:7c:23:72:92:95:b2:09:c9:9d:9e:
b9:2a:da:07:57:9b:4e:a6:57:d7:11:cd:6e:78:0d:
da:af:ff:f1:9d:ff:de:d5:d6:de:aa:54:ae:17:cf:
ef:d9:75:c2:ef:30:38:9e:c1:3e:c5:28:75:a7:cb:
53:e6:2e:be:83:04:5a:50:61:51:90:32:9f:5c:31:
31:c7:5b:45:e5:d4:d1:e3:d6:69:5f:da:f1:9d:5f:
22:07:31:55:f2:3b:16:c9:f9:91:85:6a:c4:07:e5:
d8:fe:25:10:d8:29:2b:b8:0e:16:6f:47:0e:44:69:
43:f0:fc:b5:91:de:be:91:c0:c2:36:9b:4a:b6:bb:
87:bd:8e:49:74:48:db:c3:46:c1:33:c2:e6:c6:dd:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.97.0/24
IPv6:
2001:df0:a000::/48
Signature Algorithm: sha256WithRSAEncryption
5b:76:c0:ae:ac:cc:99:24:8b:f2:81:86:c0:e6:97:b5:28:bb:
03:92:93:8f:e9:76:4b:12:01:7d:d2:88:f7:c9:07:4e:c0:57:
8c:6c:99:7c:86:57:b2:6b:59:33:1e:82:f2:2a:c6:e6:53:ae:
96:68:c8:4e:63:b7:d3:e1:e8:85:48:d6:c2:3b:60:19:a0:4f:
95:1b:f2:43:e0:2b:0f:27:14:0d:c1:16:f7:30:de:54:3e:59:
7d:58:62:22:75:df:93:63:c3:8b:d8:86:42:a1:ad:70:57:38:
da:e1:9e:1b:53:a2:94:e2:40:5f:a4:f1:d7:25:a5:08:73:be:
e3:14:f9:b8:d6:e5:59:96:a5:50:f0:f6:21:73:88:97:89:72:
45:3d:8c:89:2f:9c:92:c0:19:29:47:2f:9c:1a:9a:bb:4c:fe:
81:ff:65:5c:f2:d2:84:2d:e9:c8:54:fe:06:b1:55:9e:10:8a:
f9:b9:59:40:00:0b:2a:40:a1:7a:f2:ce:e7:61:9f:51:db:5b:
ec:bf:07:29:11:dd:27:85:8c:19:fe:d3:ab:cd:0f:2c:15:56:
11:24:fd:90:2c:d9:21:ef:2d:90:70:f3:9c:d3:e9:b7:27:d5:
6c:ff:75:a4:b3:7c:e3:55:21:93:9b:56:ea:3e:c0:9e:2d:c2:
c7:0a:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:00:49 2026 by rpki-client