Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer (raw, json)
Hash identifier: /3B1YFnUbmzApGs9SBjgOy7JB4J5TFfx8Mr5/0Whuf4=
Subject key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A546
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Mar 2026 14:11:56 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.85.108.0/22
IP: 119.160.232.0/22
IP: 2400:aa40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 01:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173382 (0x2a546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 14:11:56 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:fa:2f:84:aa:67:84:3c:b2:22:a3:4f:bf:
07:9c:d7:55:01:a4:61:e8:1b:e5:f5:18:10:67:4e:
01:29:12:fb:f5:ae:ce:15:55:72:f7:a7:4d:25:57:
f9:f6:42:04:1b:d0:b3:42:13:cd:b9:4b:5f:cd:12:
ae:8a:90:dc:ad:9b:7a:81:b0:a1:e4:97:3f:2e:01:
56:3b:92:9e:80:83:a1:50:e8:ab:53:39:bb:4a:32:
8c:80:84:72:d4:d5:ae:47:73:e2:48:a1:0c:27:6a:
86:c5:95:5f:4e:6a:e4:e8:2b:a4:50:ea:4b:6f:85:
70:75:d2:c9:d8:54:07:5b:c0:23:63:06:52:14:ad:
69:83:ef:8e:d2:6b:2d:9d:a0:f1:dd:0a:60:55:5a:
cf:0d:df:ae:3e:c0:f3:f5:1f:3b:d6:01:f1:0d:48:
b6:e0:e8:43:d5:a6:63:30:78:75:1f:b2:87:fe:6c:
df:d1:85:76:08:f3:36:17:04:a1:4e:19:b6:a2:dc:
97:df:be:a2:b2:69:6c:12:43:24:71:02:82:20:3f:
7d:3d:b2:89:55:bd:fd:8c:90:cb:5e:d8:28:91:10:
37:8b:56:14:90:45:96:5b:dc:84:17:98:09:48:1a:
ed:77:3e:3f:b4:b5:74:2b:c2:1c:ac:81:72:d3:6f:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.108.0/22
119.160.232.0/22
IPv6:
2400:aa40::/32
Signature Algorithm: sha256WithRSAEncryption
b1:33:cc:a9:d0:87:4d:67:4e:01:a8:7e:7f:91:a0:5e:7a:60:
2c:64:76:b0:a8:1a:89:a1:57:b8:ec:03:dd:d4:06:63:18:97:
e3:50:6a:52:fd:3d:8f:61:67:9a:3d:23:9b:13:fc:1f:64:44:
16:47:d0:f8:8e:fd:bf:9a:f6:ad:35:9b:1d:16:b2:9a:0d:cf:
f4:b1:2f:1c:22:3c:f2:da:c2:6d:a6:e8:8a:02:db:a7:f6:2b:
6d:ba:25:7a:c5:df:67:71:a8:a6:3e:7f:33:cd:03:e5:3e:48:
08:12:80:e4:c6:d6:11:49:00:60:e0:81:e9:e5:28:5d:c2:b8:
fb:36:2b:ce:65:0d:4b:82:64:64:bb:38:19:53:77:be:40:f0:
0b:d2:bc:64:4c:05:95:75:65:09:f2:03:05:77:fe:d2:ce:fa:
85:11:ae:13:3f:31:76:29:2d:a8:31:c6:65:eb:95:03:80:5e:
fa:1e:6e:c0:92:92:c6:95:02:cd:62:7a:53:85:9e:42:ca:b6:
61:8f:40:1e:ab:8e:e3:f9:af:06:8b:7f:57:33:b3:42:3a:31:
fe:4f:0f:8d:ba:3e:52:1c:c1:de:e8:11:19:25:ac:39:12:fb:
77:d2:29:8a:a4:bb:9b:32:ad:1a:1e:01:41:25:d9:e1:e3:ec:
22:d1:e7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:27 2026 by rpki-client