Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
File: -w7kjrCDajqH89uEyQ0NmXQYO7w.cer (raw, json)
Hash identifier: AO9NwJxnsNN6mop6T3ZrppYfI2G3+DnXWUlYeJiIofQ=
Subject key identifier: FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B38F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 09 May 2026 04:23:51 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 43.251.144.0/22
IP: 103.226.148.0/22
IP: 2001:df2:f800::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177039 (0x2b38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 04:23:51 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91DF92B, serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:e8:27:cf:f9:b0:fb:59:51:bd:ac:e5:10:
75:40:7c:76:c9:4b:18:98:44:97:73:fc:ee:3f:b3:
d9:03:fa:31:94:18:24:a7:7d:92:ed:dc:ca:09:52:
50:ad:4b:b4:9e:f1:7d:f0:be:c6:53:6d:4c:b2:77:
12:a2:3d:ba:4c:46:7e:b4:27:14:22:21:40:34:71:
92:08:e4:96:55:2d:6b:94:a1:b2:fa:03:77:04:5b:
b9:04:a2:2c:24:23:df:99:3f:bd:76:44:99:77:10:
e8:d0:87:3d:c4:09:7f:0e:fe:a1:82:1a:f9:2f:2d:
fc:d0:f3:8f:38:69:97:d0:3d:35:41:1b:71:c4:6c:
f0:9b:d4:45:1f:a1:50:1e:46:82:9e:58:33:02:5d:
fc:b8:27:46:e9:1b:c7:03:94:2d:0b:10:03:f5:07:
9c:a0:e2:fb:e7:e4:4c:6a:79:c6:18:d1:4d:0c:ce:
aa:42:e5:f5:7e:f9:d5:b4:6f:91:98:7e:aa:c8:ec:
bd:a9:21:bc:d1:64:83:46:7e:a5:21:2c:d1:ea:b0:
4f:48:64:94:09:4e:35:74:c6:8b:e0:18:b9:1e:8b:
c7:97:b2:a5:e7:3d:69:1e:5d:45:c6:ae:55:a1:a3:
fe:48:08:46:19:64:82:4a:5f:0b:8b:42:32:b2:87:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.144.0/22
103.226.148.0/22
IPv6:
2001:df2:f800::/48
Signature Algorithm: sha256WithRSAEncryption
c3:fb:49:38:8b:82:fc:31:c7:09:e5:a7:eb:3d:93:ab:f7:39:
c9:a4:8a:67:09:76:54:9f:71:c6:45:d5:1d:4f:15:20:a2:1d:
a6:9f:3e:1b:f3:4a:5f:07:fa:69:7a:0a:36:93:06:29:27:11:
6a:8d:6c:c4:56:90:16:88:83:82:68:69:7a:37:f3:93:61:2f:
e6:4c:38:a0:95:0a:c6:e0:b9:50:60:2d:40:a1:32:3c:12:86:
d2:eb:06:d1:99:de:59:3c:3f:d9:c3:08:51:be:7e:eb:e8:b8:
7a:6e:c9:a9:02:02:3d:d8:d8:7c:aa:7e:4c:36:17:c2:e5:20:
8d:f7:0f:4e:15:17:25:1c:02:8e:17:7a:8f:38:d3:27:21:ab:
fd:3f:1b:55:58:c4:c0:70:9d:41:0a:1c:64:a1:d6:ca:1c:e4:
66:65:12:df:cb:9a:db:a5:c4:1c:47:aa:1c:82:b0:34:1e:b6:
d7:e4:b1:95:ae:d9:cb:a5:0d:22:88:b1:89:78:15:51:04:05:
ae:e0:e3:11:e6:dc:a5:4d:9e:4f:72:40:1d:86:2c:e1:7b:f0:
b5:ea:ab:ca:16:ea:05:34:85:88:a4:94:cc:93:c7:42:aa:4a:
39:02:cc:77:46:91:c0:d5:12:1a:66:e8:4d:f4:f1:86:f1:e8:
a9:7c:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:37 2026 by rpki-client