Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll_Zi6uQBatBhHQna3Cdawlg7IY.cer
File: ll_Zi6uQBatBhHQna3Cdawlg7IY.cer (raw, json)
Hash identifier: BERm/Hr9mb6ctw0wRXzyIsVbyDGSbiFJ9XrUcmubgjs=
Subject key identifier: 96:5F:D9:8B:AB:90:05:AB:41:84:74:27:6B:70:9D:6B:09:60:EC:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D1CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919310F/622CFA98A50911F18C8E36C03411F970/ll_Zi6uQBatBhHQna3Cdawlg7IY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919310F/622CFA98A50911F18C8E36C03411F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Aug 2026 06:58:39 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 103.31.184.0/22
IP: 2401:84c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 09:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184781 (0x2d1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 31 06:58:39 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A919310F, serialNumber=965FD98BAB9005AB418474276B709D6B0960EC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:51:7f:9f:f4:5a:f8:b0:d2:8a:2b:e6:8b:
90:fd:16:70:97:bd:a7:e8:e8:32:39:f5:00:26:05:
42:a1:ce:30:35:3c:d1:c0:f5:5c:4f:a5:c4:f7:19:
bb:8c:57:df:31:44:b9:6c:97:b2:fd:c0:4c:72:15:
25:58:60:70:38:c0:0b:c1:fe:d7:dd:33:e0:64:d9:
60:74:02:3d:a3:4d:93:6e:7e:97:71:c9:bc:bf:23:
2e:f0:71:e9:de:42:1f:c9:64:10:8f:fd:a1:53:8a:
ee:fe:16:a5:f9:b1:03:58:45:be:d2:f3:69:8a:c6:
7b:0a:bf:bd:a9:30:b1:f4:28:9b:6b:05:18:3f:79:
db:43:f1:e4:76:a9:2b:c6:8d:1c:3a:6d:4a:7d:a7:
13:49:7c:4b:29:41:4d:56:de:ea:dd:6f:7d:43:2f:
31:22:bc:0e:5e:6f:07:58:04:0a:4d:77:ec:76:ea:
d9:33:24:be:d6:93:46:7c:f3:b5:81:34:7c:9e:bd:
5a:2d:d8:31:ca:3c:bd:5d:02:89:48:3c:31:14:2e:
26:63:93:26:56:fb:fd:25:2a:5e:a6:d4:3b:16:35:
2f:07:16:e8:63:54:f3:30:2a:f0:ff:da:fc:12:df:
df:5f:63:b0:8f:25:21:35:25:ae:09:c6:3b:ac:0c:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:D9:8B:AB:90:05:AB:41:84:74:27:6B:70:9D:6B:09:60:EC:86
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919310F/622CFA98A50911F18C8E36C03411F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919310F/622CFA98A50911F18C8E36C03411F970/ll_Zi6uQBatBhHQna3Cdawlg7IY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.184.0/22
IPv6:
2401:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:60:98:9c:7c:17:a0:38:53:5d:62:aa:bd:78:e6:4c:e6:b4:
e4:d6:fc:55:0f:c4:f4:ce:e7:de:9f:11:20:fc:3a:7a:f6:fd:
b8:62:d1:01:6c:69:75:79:9d:25:0f:82:5b:2d:66:10:84:37:
84:ae:34:a6:1a:71:36:89:32:ef:43:00:70:f9:73:7a:94:0f:
78:42:e4:36:22:cb:7a:f9:9a:68:9a:10:54:db:53:66:43:96:
81:ba:f6:57:a3:50:1e:b5:40:80:25:a2:27:0a:d5:55:14:2f:
4e:9b:47:87:24:9e:20:87:a1:8c:b6:dd:f3:1a:e3:0a:4a:24:
37:fc:5c:c9:f0:e4:a0:e3:70:6c:63:e3:a3:6f:6d:51:3e:14:
a8:50:d2:d8:1f:c5:d2:2e:51:89:fb:31:6c:d9:e9:89:96:fc:
83:21:bf:99:c6:13:1d:a7:10:e3:f1:d0:b4:35:a8:49:43:72:
96:3b:24:a9:f6:04:ea:9b:ad:9c:c4:7e:cb:5f:ab:3a:1e:49:
ca:93:6c:23:f0:59:9a:04:e7:45:8b:58:f4:ad:7d:ff:66:5d:
61:1d:b9:f5:b9:5d:53:ad:c5:47:e8:60:4e:36:6e:c0:68:c7:
94:6b:d2:53:9e:da:b0:c8:f8:ec:7a:e6:bc:0b:b8:14:06:bc:
e5:f9:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:33:39 2026 by rpki-client