Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
File: xQRWVXeumfYZHJeDPdvdYk7CTpI.cer (raw, json)
Hash identifier: Dkj4X8Iv0RdY+NdGUxavF6ChjgXu0Gg4/ebXTQgYg6U=
Subject key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029206
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:07:35 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.160.100.0/23
IP: 2406:e840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168454 (0x29206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:07:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:64:2f:58:ea:73:55:b8:c4:c5:5b:33:0d:
fb:a4:d1:10:79:b9:99:66:b1:ed:ea:28:32:49:e7:
4f:08:dd:a4:27:64:28:8d:f7:cc:f1:f7:bc:47:37:
d8:6c:47:43:db:6d:b4:74:04:ba:e9:d7:00:78:00:
d9:80:96:61:0f:eb:fd:0e:c9:09:ef:00:3d:f9:f4:
52:e8:f1:d5:7f:dc:b4:1e:f1:c5:5b:c2:45:21:b7:
a4:14:78:eb:34:51:5d:d7:f4:14:df:95:de:02:fd:
6e:6b:98:94:b3:e6:93:9b:66:a6:37:cd:49:48:10:
e4:8c:bd:60:6b:d9:a0:a1:15:62:6c:b6:71:01:12:
72:3e:01:58:60:89:1b:df:4e:e6:e2:4b:9a:42:4b:
64:8a:b3:5a:27:bc:fc:0e:15:82:49:cd:1d:88:38:
42:b8:ea:74:81:29:a3:bd:b5:b8:0e:cc:63:c6:a7:
49:a2:01:7c:ce:c1:06:c1:c4:95:62:42:42:db:a3:
6a:e2:9f:f4:7a:44:d0:e0:68:4e:af:ef:14:87:3d:
0c:d2:7c:94:d7:ba:b5:e5:52:00:50:e7:e0:42:2f:
27:3c:a0:70:50:e5:27:fb:4f:47:21:cb:f9:2a:2b:
03:62:4d:ed:08:90:f0:13:2b:86:c9:e9:28:6e:0a:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.100.0/23
IPv6:
2406:e840::/32
Signature Algorithm: sha256WithRSAEncryption
8b:fd:ea:20:0c:be:88:c9:c2:ca:8e:25:6a:cb:02:93:38:48:
68:a8:e7:8d:ba:83:93:27:ed:31:f0:c0:67:71:8f:09:bb:7c:
b3:47:29:fc:e4:87:82:d5:55:8a:58:b4:13:30:59:e8:3d:43:
34:d6:4f:24:54:fc:12:87:d2:56:13:4c:6a:72:1a:e0:e3:1b:
3c:62:d7:8a:75:cf:63:0d:c8:63:8e:0f:5d:db:80:71:b9:73:
40:6f:a8:92:4f:bd:c6:ef:26:a3:3a:8e:05:ec:fa:a7:ee:d4:
2d:e4:c2:73:6c:05:11:08:63:28:ed:8d:3e:54:db:ef:d2:ea:
e6:f7:d2:d3:b5:6e:35:bf:3a:e0:a2:24:b1:ad:3a:d6:6e:a5:
5d:bd:cb:60:36:b7:c4:56:6d:17:5e:57:26:03:88:a7:ce:70:
2f:6a:d0:5a:8e:fd:3a:0b:14:95:75:fb:21:58:b0:a8:d7:36:
df:07:d3:a5:6a:82:8a:ef:2f:51:b5:4b:d4:e0:c6:1e:0f:c3:
aa:b8:4e:38:60:f1:fe:95:bf:6e:5a:cf:9e:7f:ac:f2:05:a5:
25:b5:7b:59:a5:9c:ba:c3:96:ac:44:c8:76:af:ce:20:69:1f:
07:bb:ec:dc:b2:e0:37:99:c0:36:5e:ec:e0:40:77:19:80:1a:
c2:cd:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:13 2026 by rpki-client