Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
File: 05gN65FABIn5D_5q7xfErdhrEh0.cer (raw, json)
Hash identifier: k/Ts2I1f+c1LN0jCd7TXmh8XEElisjNlJ3IPRP9XTWo=
Subject key identifier: D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B38D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 09 May 2026 04:16:20 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 43.251.148.0/22
IP: 103.224.148.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177037 (0x2b38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 04:16:20 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A916D6BA, serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:57:93:31:57:c4:cc:4c:fb:12:8a:36:88:
8c:8b:8f:76:8f:7b:2e:02:64:a3:aa:7e:29:60:91:
cc:bd:63:7d:f1:d7:74:68:ad:67:9b:90:f5:57:dd:
6a:7f:5a:ee:3e:45:03:df:84:2c:7c:d9:cb:e6:1f:
bd:39:4a:2f:9d:64:6c:38:5f:fa:ba:4c:78:c1:0e:
40:c0:92:b9:23:b2:45:f0:c4:30:31:8d:1b:a2:31:
a1:28:4e:30:f7:98:0c:e7:b1:40:b2:22:8f:44:79:
e5:b6:ac:3a:3d:ec:38:bc:f1:00:d0:d2:86:e1:41:
ff:77:77:2f:2f:11:a3:fb:55:88:ae:d3:b8:75:9d:
07:d1:a7:43:11:9c:49:b0:61:34:b9:b4:1b:61:2d:
50:c4:4f:5c:20:67:b7:7d:95:99:20:20:ed:eb:cd:
19:d5:1b:32:82:d8:6c:8b:b7:71:dc:2f:2d:7d:49:
d0:c8:48:4d:3e:aa:d3:32:8c:1c:57:63:3c:c6:74:
61:4b:0e:db:83:e7:66:90:50:6a:60:fd:b7:0f:c2:
60:ac:a3:84:d3:61:68:ec:e7:c9:0d:5f:cf:70:72:
1d:4b:38:ab:00:59:9c:6a:9f:a0:10:04:7e:c1:f1:
3e:43:0c:23:28:64:d3:0d:98:22:5c:ac:f4:2d:6d:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.148.0/22
103.224.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:85:34:90:fd:d0:17:32:d8:7b:bb:b9:f1:aa:9a:4d:64:8f:
5d:04:91:bf:4d:c2:41:a3:31:2b:32:5b:5f:4b:6f:8c:2f:01:
fa:82:03:ed:20:50:c7:c5:ee:a2:a1:c2:a7:37:62:43:11:50:
c4:eb:ff:de:6d:42:e4:0d:34:fb:42:28:bc:39:66:1b:60:bf:
47:6f:71:c0:10:20:c1:92:d9:69:fa:7f:96:27:58:99:f5:55:
5a:07:a6:60:96:53:50:8c:1b:35:f2:26:cd:51:c0:f3:53:ac:
bf:59:f7:96:31:cd:d2:45:ef:88:ef:3d:7e:78:f5:89:e0:ad:
f9:d4:09:65:9d:03:31:1a:84:ab:d3:68:1f:6d:30:5a:cc:00:
fe:ca:d4:55:de:90:80:28:c4:9b:0a:fd:d2:1c:e0:ba:f2:17:
16:87:ab:92:61:a4:d0:9b:66:ae:bd:0a:d3:e5:01:b4:cb:b3:
4c:f6:72:81:e8:4d:d9:65:92:5a:99:f1:c1:fd:86:2c:16:54:
0f:d6:54:d7:37:5a:18:dc:a3:32:4c:ae:ce:b4:fd:3b:4d:f5:
91:fa:a6:86:fa:4e:04:79:47:22:b0:c0:ab:30:72:9c:e0:d8:
ea:2b:ed:b4:a6:c3:6f:14:c1:ce:d4:3e:21:e6:e2:da:93:c8:
f7:56:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:47 2026 by rpki-client