Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
File: iH554lttHTfvHzG8WgIy-OdlFUU.cer (raw, json)
Hash identifier: iz6ACjWsuFeT0oSxekepdTt57sO+eNu7Y5oYnInVl90=
Subject key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F05
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:14 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.147.198.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171781 (0x29f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:14 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:94:22:d3:07:4f:31:ba:c8:8b:ac:21:d5:
ce:8c:94:74:47:8e:41:ea:6b:e9:bb:05:38:c5:a7:
1c:5f:08:d5:6d:e9:bb:9a:d1:83:5b:94:4b:bf:ad:
8e:c0:76:28:c3:13:d9:cf:3c:4f:25:76:56:51:46:
25:16:bc:50:43:aa:32:29:e6:67:ef:7e:92:67:77:
01:b3:e8:c3:20:fa:e0:8a:41:29:e1:dd:7b:a4:d2:
76:73:ca:52:71:74:4c:6a:99:0f:47:aa:3c:13:a6:
5c:ec:05:fd:44:b1:09:28:58:ec:06:94:72:90:f4:
a1:e1:e9:14:d4:cc:0c:57:63:92:18:df:49:8b:6d:
aa:8e:e1:a5:b3:ce:6d:08:1f:cf:f7:19:b6:d2:7f:
b0:55:b9:cf:d4:8d:f1:95:24:6f:a8:91:32:d0:d8:
9d:bf:a5:36:33:8a:b7:07:46:3b:7e:c3:62:c6:d5:
42:06:aa:a8:3d:4f:bc:62:2b:96:82:f3:3b:8b:30:
90:9b:16:f8:f6:4d:12:72:7a:d0:a3:80:fe:06:0c:
00:40:08:e7:e1:71:83:96:b8:19:04:23:ae:4c:40:
9e:30:88:3d:27:98:cb:ad:e0:63:44:6f:e3:01:f6:
5e:aa:2e:44:a1:d7:70:c5:9c:da:0a:1a:20:db:5c:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.198.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:4c:fb:02:6e:89:ea:dd:d1:5a:29:e0:78:71:79:3f:47:5b:
b5:6e:8a:83:8e:fa:22:ae:15:8a:86:96:93:c7:bb:ed:66:24:
9e:25:dd:62:5b:8f:2b:b4:f6:ae:bd:0a:a0:c7:21:a8:71:72:
c1:a0:d2:4d:89:df:38:3c:2f:ed:1e:07:ff:af:8c:57:b6:81:
fe:64:9b:9c:5c:9c:b0:af:35:4e:fd:7b:86:df:50:57:40:41:
fc:ed:21:89:a3:e4:3d:1b:96:b5:41:7b:9b:30:b5:17:20:b5:
cd:32:0e:7e:83:38:6e:78:40:bf:f2:cb:2b:f5:43:79:fa:49:
23:88:10:3e:d4:08:9a:60:be:74:8d:1a:50:78:2c:47:89:88:
b1:21:b2:06:0e:b5:51:f4:5f:de:89:89:40:67:1b:78:95:34:
52:0b:e1:63:65:d2:a1:60:4a:2b:20:9c:ea:4b:d5:5a:78:d8:
39:0a:28:de:86:38:12:32:d6:51:14:7c:0f:77:ab:4e:63:60:
f7:3d:66:0a:ff:19:60:8a:24:f9:38:fb:2e:c5:1c:73:f4:10:
ed:dd:36:76:ab:27:3d:8e:98:85:39:e7:6e:54:2a:f8:d6:03:
67:bf:21:22:b7:85:92:81:98:b3:a0:ef:84:7a:36:52:9a:fd:
74:17:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:40 2026 by rpki-client