Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer
File: tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer (raw, json)
Hash identifier: F8mV5g0cBOD8k2IklFx7y7smvflu9mVdq8wW2dGjKpM=
Subject key identifier: B6:E6:06:7A:83:C2:AB:95:9C:A9:81:BA:AF:CF:95:0C:52:24:F9:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D5B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 11 Sep 2026 19:22:39 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 103.252.161.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185779 (0x2d5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 11 19:22:39 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91C9B7D, serialNumber=B6E6067A83C2AB959CA981BAAFCF950C5224F99C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:2f:78:1c:42:7d:8f:51:23:1b:ac:52:fe:
61:9c:08:46:71:e3:48:56:63:f3:63:48:bb:fd:fb:
cd:0f:ad:a1:d0:de:23:05:31:5e:38:0b:78:34:d7:
54:c9:14:e1:44:74:d8:0a:79:78:d0:d9:51:bf:f6:
f5:ea:69:9f:37:92:3c:17:7f:af:f7:29:d7:df:62:
56:45:cc:2a:e3:f1:6f:74:c0:90:67:59:50:c6:2f:
44:83:9e:f5:d3:f0:02:6f:05:22:98:b6:40:96:8b:
a7:4b:59:f9:51:93:c3:7b:55:33:03:4b:e7:e8:76:
85:25:a9:19:2e:9f:98:2a:a2:bd:b4:37:df:2c:ba:
11:13:64:26:d1:9f:86:c2:57:c4:c1:1f:41:8f:fd:
ec:2a:0e:fc:e1:6f:0c:e4:54:d9:47:35:8d:97:e6:
9b:2a:1c:a8:18:94:91:c0:cb:d5:0f:d8:89:1f:07:
0e:60:51:76:ac:f3:26:6d:35:6f:2e:fe:eb:ea:70:
c2:57:ae:97:30:53:6f:d5:41:29:0e:57:97:ab:ef:
d3:35:66:ce:cb:44:e6:cc:ee:5f:ff:75:db:94:1a:
70:51:7d:65:18:85:ff:36:09:3e:45:f2:86:f1:ff:
c2:67:21:6f:ba:9e:26:af:d7:11:30:85:e2:d3:55:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E6:06:7A:83:C2:AB:95:9C:A9:81:BA:AF:CF:95:0C:52:24:F9:9C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.161.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:aa:8d:29:03:2d:99:9c:c6:0d:e6:b5:da:3f:68:45:77:d3:
fc:9d:f4:22:4e:d6:4e:d2:21:4f:6b:bb:36:20:fc:99:74:ab:
a0:fc:07:2c:37:f6:48:fe:ef:d7:76:ac:78:3d:aa:98:68:d8:
cd:c8:48:23:72:12:23:3c:a0:28:85:a8:6b:a8:1a:46:c0:aa:
14:31:16:b4:8f:e6:0d:66:4b:e2:d7:09:9d:d6:68:44:4f:0b:
3d:6e:19:7b:b8:5a:6e:26:6b:44:04:67:4c:77:73:72:bb:0e:
92:b3:82:fd:d3:d8:e6:14:72:1b:9a:77:93:bd:ae:07:97:df:
80:99:1b:47:16:0f:0c:04:25:39:49:22:79:23:73:b2:5c:d7:
16:60:27:20:26:ad:86:7a:ba:b3:2c:85:f9:a1:3f:1a:b4:0b:
3c:74:ca:fe:10:b5:60:1a:4c:91:69:15:d3:40:b5:59:56:85:
18:8f:fe:b4:bf:79:14:3f:c0:7b:8e:ca:0b:6c:1f:06:56:7f:
19:89:71:89:f2:88:c1:75:58:6c:eb:3c:d8:1c:1b:08:91:70:
8a:3a:1d:07:83:a4:56:f9:09:cc:36:40:81:b9:1a:62:7a:3b:
dd:61:79:a5:d7:65:d6:00:3c:3e:64:a0:4a:4b:87:1f:0b:d2:
c3:60:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:10 2026 by rpki-client