Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
File: ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer (raw, json)
Hash identifier: N5wrjvtU0Lbx46/0EarqjdmvejYXyAVAfDNBktqXZIw=
Subject key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D447
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Sep 2026 07:59:53 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 43.246.148.0/22
IP: 103.241.8.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185415 (0x2d447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 7 07:59:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:ba:c0:53:fa:f4:2d:d1:8a:19:c5:1f:38:
83:60:4f:a0:38:2a:f6:0d:e6:fa:13:b2:bb:05:93:
44:d2:2c:44:33:e0:4b:66:47:3b:f4:94:46:e3:9f:
9c:4b:f3:12:72:9a:ba:44:a8:d6:15:ce:ae:a3:3c:
2b:9f:ff:eb:b0:5d:18:0d:ee:12:85:a6:c0:74:1c:
b4:4f:d1:31:4e:3e:25:06:9e:7c:c1:cc:0b:33:91:
de:59:01:c7:34:9c:bb:ce:de:17:9b:8f:b3:fe:63:
10:d0:3e:05:6e:4a:2b:43:e1:08:58:d2:da:29:36:
8d:b4:3f:04:e9:68:9f:54:a7:b0:26:36:5a:88:82:
e7:1e:f4:da:c6:71:f3:9c:05:7a:b2:3c:71:f5:c7:
ab:6b:07:58:a3:48:19:d8:3c:89:ae:c9:2b:0a:ff:
2b:0c:2e:88:3c:6d:6c:3c:f5:c4:ad:02:99:3a:5b:
0f:e0:f4:bf:df:78:30:a7:c5:2a:ce:2b:99:fa:79:
30:ba:f6:79:9f:ee:65:dc:ab:52:24:3c:fa:7f:fc:
55:02:2b:ee:c4:04:da:53:c7:dc:8a:1d:18:ab:58:
50:ac:d7:06:b2:dc:15:70:0f:69:61:23:a5:3d:64:
e6:20:67:52:21:f6:93:ba:e8:8d:cf:3d:c6:46:08:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.148.0/22
103.241.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:66:64:f6:e5:c6:ad:26:37:4d:65:9c:67:bd:91:b8:95:fe:
56:88:ed:74:cb:c2:7b:16:16:69:d7:5e:77:d6:ab:bc:40:1f:
42:b0:74:eb:de:b0:cc:4e:7f:2b:ef:21:b3:38:54:79:fd:8d:
3a:67:09:93:78:27:d1:88:87:b9:02:70:a6:17:cd:ed:eb:93:
92:c0:75:d7:cd:59:68:94:bb:f6:ed:f5:7c:3f:60:ab:85:1e:
c4:89:55:36:17:a8:8e:29:30:1f:36:27:b8:18:2a:2c:7a:53:
5c:25:d3:25:7b:c6:ef:fb:0d:85:9a:be:7f:3f:70:45:ad:d3:
bf:96:01:03:57:ea:88:c7:3e:2d:c8:ba:0e:3d:d4:e8:e8:45:
d0:71:4d:43:f9:c1:6c:97:62:b4:98:d0:0d:0e:4e:b7:b8:f7:
c3:e8:be:f4:97:04:77:f4:a3:c6:a4:00:27:fd:36:3b:6c:4c:
3e:de:f4:5d:ca:9f:fd:b8:84:68:76:c5:18:41:e5:4c:eb:2d:
01:0b:36:63:ae:63:49:c5:c2:a2:69:51:11:16:32:94:94:6c:
48:c5:57:94:fe:cb:42:fc:eb:bd:7b:94:a3:d5:11:03:8a:cd:
87:9b:c9:33:34:3c:ee:32:89:d5:e5:64:98:9b:2c:d4:77:7c:
7e:3b:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:41 2026 by rpki-client