Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
File: DNjeYk5eS0zpjdodRx4ImBlywHs.cer (raw, json)
Hash identifier: 3W7xCdaRDAZ7ZjtA7i1IUwsM2SKPFuNtHNJFgCZMcb4=
Subject key identifier: 0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B202
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 May 2026 12:42:05 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.17.224.0/22
IP: 2400:8f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 10:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176642 (0x2b202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 4 12:42:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A912B051, serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:21:12:03:f2:ee:ae:6c:8b:0c:f9:d2:f9:
b6:53:3f:ee:d8:44:29:c1:57:0a:16:84:3b:25:fd:
81:e0:cb:99:1d:0b:d1:38:8c:8f:b5:3b:1b:77:1a:
8d:a3:08:0a:30:08:c1:d1:84:71:4e:ec:ef:22:a3:
8e:78:76:5f:39:d6:3f:e6:04:e1:39:ae:4c:8f:9a:
30:18:96:3f:2d:5e:58:f5:19:20:c0:84:9b:91:90:
80:d7:e9:51:50:3b:3d:cd:6b:b2:bf:0f:a8:d9:dd:
c2:49:82:11:f4:c5:80:bb:63:c4:91:a3:2a:9c:71:
4c:bf:db:65:b5:64:c3:aa:f6:d6:dc:a8:0f:53:62:
c4:78:35:ce:2d:42:d3:3f:97:f1:20:cd:ed:6f:38:
03:9c:bb:f0:8f:b1:a3:0b:15:89:94:a0:b6:d4:52:
9f:41:11:d5:2b:0c:52:71:91:b4:ee:cf:9b:24:10:
c1:34:1e:62:fb:27:99:1b:4e:35:cb:85:07:15:81:
86:7c:98:02:8a:54:e8:7a:01:3f:be:17:57:00:d7:
7d:91:6e:2c:e2:c6:b8:f2:a1:2d:b6:29:02:f3:ba:
12:f6:0c:9f:72:30:b1:3d:f1:62:7d:d2:07:05:ef:
d5:28:d0:cd:62:02:ae:8b:5d:62:ff:72:cb:c5:6b:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.224.0/22
IPv6:
2400:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
33:25:8f:1a:0b:4f:f0:34:18:d4:bf:31:e3:6c:56:7f:80:fd:
a8:10:f8:e4:ce:c8:c9:78:23:60:b4:70:a6:00:1c:b7:d8:12:
ee:33:43:a3:15:bc:27:4c:24:bf:2a:85:6f:ac:18:d9:f4:30:
1d:36:e2:76:e8:db:13:76:34:cd:73:3d:a9:7e:1f:18:64:01:
91:66:a5:99:5b:b5:b9:99:7e:9d:b5:a9:5c:1e:de:4c:42:2f:
c2:b2:11:c5:a0:cf:ed:06:0a:b5:3f:94:a0:80:4d:73:41:92:
1c:16:87:f0:cb:a7:e2:6e:56:e8:df:94:a4:65:32:a2:cf:fb:
5d:3a:9d:d0:07:c3:ee:bc:36:84:e4:39:a1:d3:21:03:73:cc:
d9:15:0f:59:16:ff:39:37:47:f0:db:b8:85:4a:eb:4b:a1:d7:
4a:c5:20:0f:24:6d:4b:30:53:84:e7:82:2a:cc:03:27:59:0f:
16:f5:32:a1:4d:76:93:19:7c:0c:d7:9e:fb:1f:7e:5f:33:b6:
66:8d:5d:22:64:17:71:68:dc:8a:53:51:e3:3d:72:ae:b1:21:
d4:ea:7c:c4:d2:96:35:c8:85:24:a1:5e:bb:02:87:e8:2c:32:
60:79:c9:ed:e7:c1:d7:ee:e1:20:b2:5a:ac:05:9c:c5:e6:9d:
fe:7c:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:00 2026 by rpki-client