Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
File: raez5kKEQOUk2gaDhqHt8yH4gR4.cer (raw, json)
Hash identifier: 7+nYGpZpYM0jsvcdtUU3cEkE10lDBcN0H0qxq1Xzghw=
Subject key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BD0E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Jun 2026 14:27:46 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 203.99.64.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179470 (0x2bd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 12 14:27:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:6c:7d:cc:3d:ec:71:f3:6d:23:3a:5e:77:
98:c5:9f:46:a4:62:1a:39:c6:75:da:b2:43:78:db:
34:57:72:e1:48:b5:31:94:ce:65:05:25:4c:11:07:
2d:d2:9e:ec:30:f8:00:ef:47:0d:38:3e:40:7c:91:
eb:ef:8a:7c:b3:cb:7d:1c:94:eb:19:c5:cd:5b:04:
d1:84:68:a7:3e:ac:67:25:ed:e5:46:4f:de:cb:7d:
10:e7:87:12:2a:19:9c:57:7f:99:b0:ca:42:3a:5b:
4f:f6:fc:3c:56:22:d5:6f:20:85:87:e9:d2:62:84:
e2:d1:81:a2:66:5d:15:b3:98:68:49:ac:3b:60:2d:
89:c5:e9:68:ac:ae:81:a0:c3:65:bb:79:65:1a:18:
91:2b:46:1a:58:9f:31:3b:ea:e7:5a:99:46:d8:b5:
17:70:40:76:86:ec:e4:e5:44:57:ae:d4:ad:b2:d4:
9f:26:3d:63:74:a7:72:a5:4f:02:bf:80:8d:77:9f:
fc:22:0d:9f:35:39:a8:f6:ff:73:f2:02:62:85:9c:
9d:2c:0c:55:6f:a7:54:09:6a:e9:20:5d:11:23:1c:
6e:8c:64:db:35:89:f8:1c:6c:6a:3a:e3:5c:96:8e:
21:eb:45:9d:16:91:c1:65:56:7d:ee:f4:c5:7b:14:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.99.64.0/21
Signature Algorithm: sha256WithRSAEncryption
81:01:e7:c9:d7:d6:fd:f2:09:3a:b4:be:05:47:93:ec:37:1f:
48:02:94:1a:36:de:e2:20:53:dc:09:6f:0c:5a:aa:0d:32:fd:
0d:92:85:87:c7:48:45:43:88:00:87:f0:d8:90:f9:3d:fc:28:
19:49:f3:fc:e5:3c:3b:97:55:a0:98:16:54:dc:ba:fa:1c:ae:
80:54:7a:2c:03:be:8d:c9:2e:cf:b1:87:1a:53:15:d4:f2:2d:
bb:b4:ca:ef:e8:7e:ec:04:e8:9f:53:9d:2a:17:c8:0d:15:0e:
d6:6f:d9:9f:91:06:21:01:32:91:12:d2:2e:83:a6:b3:4a:f9:
ae:1e:c7:84:31:0b:7a:ac:e9:31:c7:44:53:80:67:07:72:ca:
20:7a:37:3f:7b:ba:cc:a9:1b:de:96:69:a1:c6:bf:a7:84:e5:
1f:69:d3:92:48:db:a2:b9:17:13:b0:41:2b:ef:18:91:83:03:
79:f6:d1:0d:54:3b:c4:23:37:39:6d:64:b5:1c:06:1b:b7:90:
7a:ee:b0:5f:80:75:51:54:6a:78:30:fe:a6:e3:91:b1:76:87:
1a:53:5e:01:92:b8:01:34:be:7f:b5:2b:e2:e4:9d:42:4b:7b:
84:9d:94:41:e3:8e:ec:1b:77:48:05:f2:44:0c:a5:6b:74:9b:
81:35:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:28 2026 by rpki-client