Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
File: 6ZqAcw0LqQUR27LRx_XdTaylJdo.cer (raw, json)
Hash identifier: FVsynJy+8nf48eS1RzBmVPHMH8spelubGnWb3heZlII=
Subject key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A3AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Mar 2026 04:07:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.19.60.0/22
IP: 2407:d300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172974 (0x2a3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 11 04:07:32 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:3d:7b:8a:fc:50:e3:32:14:6a:d7:69:cf:
92:57:39:55:23:f5:df:47:04:21:ba:50:5c:1f:0f:
bd:d2:29:1c:7a:40:f1:4d:55:7e:0b:56:b1:6d:34:
52:26:9d:f6:7b:0e:e4:73:8b:19:11:14:25:96:cb:
ac:99:11:8c:8c:36:5c:57:cc:47:b2:0b:63:db:f8:
d6:56:10:58:f3:40:99:63:07:29:c7:0d:a8:5f:85:
cf:6d:05:f9:46:bd:46:c3:b2:76:73:a0:f3:c0:a0:
a1:fb:0f:1b:54:2f:ab:b3:6c:71:3d:03:c1:55:2b:
89:a0:71:89:80:86:d8:d3:6c:be:df:17:eb:81:01:
0a:8a:4f:1b:88:b5:56:df:57:3a:06:1f:27:d9:bf:
75:08:9b:52:31:6b:af:6d:3a:e3:f2:91:7d:b4:07:
e0:30:f1:df:6a:37:f0:84:fb:3d:e9:82:23:4f:e6:
7d:f4:21:4c:0f:45:33:34:bd:ce:fd:28:dd:b5:cf:
91:30:57:5b:8b:40:cb:34:3e:72:c2:7e:30:c8:20:
7d:c2:9c:e8:7f:81:f0:64:e2:3a:c0:6e:b2:c3:3f:
f1:86:4e:01:93:d5:79:e9:62:f5:09:bf:21:9c:21:
da:b7:16:b4:4b:c2:a2:5b:72:0b:25:13:9c:72:19:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.60.0/22
IPv6:
2407:d300::/32
Signature Algorithm: sha256WithRSAEncryption
95:01:26:3b:5f:4c:71:ec:49:6f:84:65:00:63:18:ec:25:60:
84:62:ce:47:3b:e5:4f:b5:f6:0d:9c:7f:b3:1f:a2:8f:30:5d:
d7:c8:59:01:39:46:0b:16:b6:8c:31:e3:15:91:c4:aa:64:87:
1d:10:d4:62:97:1e:ca:c0:91:38:13:49:56:7b:ad:bd:c4:ab:
df:08:c3:fc:62:73:34:8a:24:cd:e7:92:23:91:d3:8c:cb:49:
41:f1:24:0c:4b:c8:15:1c:57:68:59:a2:3f:e8:df:2d:9b:4b:
7b:e7:e0:f9:01:7b:e5:ec:1f:be:47:6f:a9:f9:16:13:9f:b0:
fb:01:11:b2:03:8c:c8:3f:aa:ce:95:5c:a8:80:d2:ba:82:57:
9c:7d:15:71:ce:8d:df:3a:f7:74:d4:4a:d9:83:82:c2:ae:9d:
95:fc:df:c6:30:1c:16:e5:bb:b6:70:d4:e7:41:10:07:7c:8b:
db:9b:34:ea:9e:8a:6b:84:e4:8d:ac:be:f7:21:3b:71:a0:fd:
82:31:12:96:f3:d4:0b:6f:86:6c:0a:ca:a9:d8:11:da:34:4e:
b7:cc:05:bd:bd:4e:60:60:4d:f3:37:a4:63:33:69:7a:36:86:
9d:48:b5:a1:22:34:54:bf:8a:e2:c2:7b:20:8f:79:97:04:c9:
ac:eb:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:14 2026 by rpki-client