
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer (raw, json)
Hash identifier: W9HyiTqmASezRUKwImuV8YBOq7wZNRra/GGX8RT+n7U=
Subject key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C537
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Jul 2026 14:03:21 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 103.115.16.0/22
IP: 2403:9ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181559 (0x2c537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 15 14:03:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:3a:bb:92:4d:2e:d3:5a:25:87:44:39:b2:
54:13:e0:f6:a9:38:d7:0c:16:c3:bb:f8:1f:4c:60:
98:f7:64:68:73:5b:f6:d8:7b:80:d6:63:68:e6:c7:
68:eb:c6:9e:e8:75:56:5e:93:89:48:c2:0c:c0:a8:
f0:4c:7a:3c:84:b8:7c:1d:56:5b:61:9b:b2:eb:1d:
81:c8:de:bf:b6:e5:71:a4:31:0d:70:e2:a8:6c:a4:
df:38:f9:04:32:0e:d7:f6:35:00:c3:95:83:e4:93:
da:26:cb:25:c4:78:e6:41:27:1e:cd:fd:b7:e1:8d:
84:29:90:fa:12:cd:9e:69:7f:a9:52:91:a7:41:bf:
05:43:e0:21:6a:6e:f0:85:fb:f0:ba:f9:5d:c7:b6:
2a:14:57:cc:3a:aa:ad:e1:03:0d:ef:1b:8f:0a:ef:
3e:86:60:57:73:e6:d9:fd:4f:cf:ff:6b:05:15:94:
53:7b:c3:78:6b:c3:84:56:24:b3:d5:f9:c5:f7:9c:
ec:2c:5d:be:01:16:b0:d8:68:71:d2:9a:d4:73:56:
25:ea:4f:45:db:b6:96:45:bb:0e:f6:85:6d:4d:1c:
f6:78:0b:d2:4d:0a:e5:a0:1d:67:85:90:1c:12:6b:
3d:bf:4c:96:1e:b2:2b:3b:6f:c4:ec:1f:19:be:a9:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.16.0/22
IPv6:
2403:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
af:c4:61:b7:db:99:c5:5f:d5:d9:a9:11:0a:d6:d3:ea:08:68:
13:5c:96:fc:52:07:83:a8:d7:a5:ce:37:2c:03:6a:83:ba:ca:
6c:64:61:98:1f:99:5a:57:91:20:6d:6b:0b:40:87:dc:7d:3c:
51:fa:d2:02:ce:be:06:80:19:6a:a6:50:90:6b:df:3b:5a:58:
41:01:b7:c8:a0:7e:4e:cb:dd:10:b7:3b:9b:73:7f:8a:3a:89:
0f:ed:1e:00:3e:7a:99:6b:0b:66:1a:4d:1d:7d:44:04:08:01:
94:30:a4:76:a4:40:f4:24:b1:1b:c2:e6:1d:d0:5a:69:7b:fc:
a3:9d:1d:d5:47:c7:cf:e3:a0:1a:d4:1c:14:17:de:5f:24:6c:
37:1e:25:f1:fe:62:01:c6:b8:61:63:3e:0f:a1:c1:f5:ba:49:
44:88:c1:dd:9f:17:29:3a:ce:17:ea:dc:ad:10:4e:4c:31:a1:
96:45:28:df:fb:1e:da:1f:43:73:01:63:02:7d:9f:51:21:f3:
29:7a:8b:d8:b6:ab:cd:34:d0:a6:1c:b9:af:53:49:e9:29:99:
9c:17:4e:fd:7b:bd:cd:08:36:c3:8a:63:76:d8:2e:7d:72:f1:
e4:30:81:20:7d:f6:f9:c0:bd:c2:6d:b7:1c:0d:63:ba:f2:2d:
96:31:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:07 2026 by rpki-client