Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.cer (raw, json)
Hash identifier: vXTsmOGDtjJ+ljOSb1UMMSL4Vike5UWEUi9Bk/xzK9I=
Subject key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B403
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 May 2026 14:39:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 203.20.60.0/24
IP: 203.28.113.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177155 (0x2b403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 11 14:39:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:89:b0:d2:71:ed:4f:08:7e:a8:70:db:79:
8e:88:05:88:dd:09:99:03:cd:2e:66:5d:6c:4f:51:
55:14:cc:32:d4:16:42:77:aa:86:f3:8b:6a:2b:30:
27:c3:a6:af:0d:cc:7c:10:41:3e:94:cf:d7:f5:51:
4f:70:0f:02:7f:ac:d4:52:85:5f:1f:83:07:49:3b:
f3:d4:3c:8f:0c:c4:c1:c7:f7:b4:81:7b:b8:1c:0f:
51:c7:d0:2b:aa:76:5d:db:0b:08:ff:69:4a:25:78:
b3:2e:44:90:8d:47:c3:7d:41:fc:64:8f:1a:f3:ee:
10:48:57:e1:dd:a6:76:d8:46:ba:11:41:75:12:86:
f1:9e:e2:dd:82:2d:7d:37:13:a9:b8:26:e5:44:29:
1b:5c:3a:8f:03:54:c7:e2:b8:28:19:8f:b0:32:61:
72:ec:26:88:56:85:12:8d:f8:cd:10:dd:3e:75:d0:
59:bd:e9:da:fe:7f:05:00:d7:04:a5:7b:4b:52:06:
ac:0a:1e:32:99:e6:f3:65:dc:01:90:2f:b2:c1:c1:
57:e1:49:1f:bf:50:f1:c3:54:5a:64:7a:6e:77:bc:
ea:f8:e2:13:b7:bc:3b:52:ab:cf:f7:8e:87:b1:3f:
b6:5a:7f:45:db:40:37:4e:b6:93:bc:f9:ac:9f:d6:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.20.60.0/24
203.28.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:95:a3:80:1e:03:ae:7d:45:95:85:a0:b1:4f:e3:a0:0c:0b:
85:3b:14:a2:f8:ec:17:4c:90:d4:ae:ab:0a:b7:2c:e7:2f:23:
72:9b:52:73:a3:35:06:b7:25:cf:01:f4:af:f0:b2:12:a6:eb:
45:2f:a2:a6:d5:69:03:fd:f6:93:71:d2:03:8c:4a:9e:27:e5:
10:7d:93:08:f3:be:6a:37:61:57:0d:c1:7d:28:a2:08:18:0c:
31:04:f4:56:59:31:7f:f9:fe:e4:5d:72:9d:de:ce:c0:3f:e2:
6e:26:d2:e3:05:ee:a7:37:af:d6:d0:33:07:7f:b8:1a:de:fa:
11:7d:b0:51:79:de:a6:d8:07:58:26:fe:f9:22:3f:64:9e:81:
80:d1:d6:5a:31:7c:fc:ae:4b:9a:bf:c7:92:45:15:b3:8b:b2:
2d:3b:cf:54:4d:46:6a:de:8b:e9:02:3f:cc:71:41:83:a4:59:
63:a8:c8:23:48:11:e1:47:a4:01:f1:61:27:8b:05:f9:53:dc:
f3:d1:55:2d:2e:92:c8:3e:91:3f:f9:69:8a:64:c7:75:39:56:
e2:e2:4e:aa:3d:c6:35:96:ad:3b:b6:37:bd:f2:ab:f8:34:09:
0b:25:14:14:22:a1:fd:8e:54:e4:97:2b:7a:e0:67:f9:19:5b:
de:ab:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:42 2026 by rpki-client