Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
File: n5SsB4YdiAvjQDGyhnkD51wyPEg.cer (raw, json)
Hash identifier: mMHZxMkmUvcFv0ZNmKYTqbwfeJJ+oS8ce/X+CoWBP3M=
Subject key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029529
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:23:12 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134181
IP: 111.235.128.0/22
IP: 203.33.111.0/24
IP: 2406:bc00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169257 (0x29529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:23:12 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:b1:6d:67:78:2b:97:94:20:a4:77:d0:41:
dc:de:49:3e:07:95:a8:00:83:d2:d7:10:6a:f0:6d:
d2:70:c1:81:e6:ed:3d:eb:27:e3:5a:e0:87:60:e6:
f3:e4:38:df:86:00:c3:f7:6b:ac:28:8c:c3:39:62:
c0:ec:2e:e8:ab:0f:e7:a0:f3:a8:92:b6:45:aa:52:
3b:8d:89:e4:93:fb:ca:8f:b5:4f:a3:f9:3f:87:9b:
11:4a:36:70:1f:59:29:e0:df:84:39:c4:33:13:08:
ea:7b:76:b9:3d:cb:b3:0f:0e:14:48:42:2b:0a:aa:
aa:96:31:1a:f3:36:d2:0f:df:cb:d8:36:63:0d:1c:
32:e2:4d:86:eb:e6:46:21:1e:1c:22:db:28:b7:01:
a3:0d:34:09:01:30:9d:ab:71:8d:2d:c3:7f:77:c3:
40:5b:1f:8c:3d:e4:d5:dd:b7:e8:45:08:a0:cf:f2:
be:b5:19:88:bc:41:a4:74:b2:bd:b4:4f:62:28:df:
cc:0b:d8:35:f5:e0:a2:eb:93:10:0d:ae:1f:41:b5:
8d:bc:bc:94:67:cf:16:24:ba:87:ed:05:63:b3:78:
06:2b:4c:ae:5c:4a:05:11:77:94:41:d5:fc:0c:05:
2f:cb:34:63:f4:c5:25:be:40:fc:7d:c6:ef:df:0a:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134181
sbgp-ipAddrBlock: critical
IPv4:
111.235.128.0/22
203.33.111.0/24
IPv6:
2406:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
59:41:14:52:55:b1:ed:87:29:23:a6:c9:0c:92:5f:4e:bc:5c:
10:bd:ec:89:80:40:0e:ff:13:70:8b:ba:fa:d3:2b:3c:e7:66:
49:ef:9f:8d:3d:ce:54:16:5d:fa:b5:33:aa:d5:5f:98:65:51:
fa:07:c9:83:03:fc:4c:12:7f:79:8d:c1:45:40:0a:98:24:53:
a2:f0:87:e2:b0:15:94:75:23:7b:ee:86:4c:0a:77:ef:27:9e:
f1:04:8f:7a:6d:14:cf:3a:3c:84:94:15:e8:79:b4:54:5a:82:
d5:bc:8a:80:45:bf:2b:14:8c:9c:22:32:90:27:75:d5:7f:8f:
e3:7d:be:47:01:3b:b2:ac:d9:c9:b8:cc:0b:dc:a2:22:eb:7a:
88:54:e4:2b:4b:94:ea:92:30:41:bf:81:2c:76:d0:f0:74:fe:
3f:f7:0a:ba:05:cf:a2:8e:3e:50:93:55:d7:96:9e:4b:4c:7d:
09:c0:10:29:58:c4:4a:b0:79:6c:f9:25:53:81:d7:8e:41:fa:
d3:d4:81:37:6c:05:cd:fc:45:10:6a:ef:d0:45:60:c6:6d:dd:
20:aa:46:d0:92:ac:91:6e:88:27:78:83:ea:28:ea:b0:6b:06:
9a:6e:43:d1:40:38:1a:a3:3c:7e:8c:9b:5a:8f:76:f6:94:18:
66:dd:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:14:06 2026 by rpki-client