Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.cer (raw, json)
Hash identifier: IJgO7Q30AICL27OsgTBEOXRQfQPxlfbZru5whBL2d2Q=
Subject key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A61F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Mar 2026 14:21:48 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 202.37.72.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173599 (0x2a61f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 24 14:21:48 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:7a:6b:21:1a:f7:e3:69:b7:d8:db:4b:13:
d7:82:74:65:c1:09:6b:80:66:89:8c:b0:4b:ef:e2:
37:9c:f1:8a:11:80:dc:c1:53:3b:03:fa:e9:53:84:
8a:fe:a6:d0:b6:69:3b:b8:22:4f:9b:bf:66:7a:26:
91:8a:0d:c4:a8:d2:84:0a:a7:87:9b:cf:3f:71:ad:
ce:6c:e2:9a:54:c0:19:c6:9d:ac:e2:d1:4b:96:32:
40:95:c7:dc:7c:97:fd:c3:a3:ee:41:55:63:58:27:
91:72:df:18:f6:b8:21:de:47:cc:43:ba:77:87:ab:
f7:a1:70:28:48:77:09:cc:7c:ec:96:70:26:1e:5e:
66:11:8f:11:e1:29:6f:0a:5c:6e:49:e7:c3:a0:63:
fe:75:69:66:7f:2e:07:0d:ab:9a:b0:eb:0d:dc:dc:
95:d8:cd:77:40:5a:66:16:de:d1:83:1f:e9:31:d8:
05:e1:42:fa:2c:8d:05:9a:67:93:86:a4:cc:5d:1c:
7b:1c:a7:ac:ef:98:87:dd:78:ef:52:84:71:b8:38:
f2:23:eb:64:b2:f0:a9:7d:b5:20:53:3b:5e:04:eb:
69:e0:28:f2:f3:69:7b:bc:71:5d:b3:b3:96:19:13:
7e:64:24:74:b9:a2:73:9f:0c:72:38:1d:ae:92:01:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.37.72.0/24
Signature Algorithm: sha256WithRSAEncryption
46:98:ee:83:8d:e9:c1:89:b4:fa:d9:f9:13:f2:9d:b2:7d:92:
9a:0a:18:70:17:31:95:3a:b0:76:8b:e4:a6:c1:a7:51:35:23:
8c:9f:9f:84:87:ef:7d:33:26:84:8a:a5:9a:d6:b6:74:90:d3:
34:26:6a:57:24:be:02:f6:6f:bd:fa:5c:ae:e5:6c:8e:e1:39:
d1:7e:21:e8:a6:3d:ed:16:e7:5b:44:7f:0c:cf:0d:98:0d:c5:
6c:bb:aa:f1:ff:ca:eb:a4:bb:73:d1:2f:e7:59:73:e6:6f:a0:
69:e1:87:fd:86:39:d3:38:a4:5d:ba:6a:51:ca:c4:9c:ca:eb:
b3:ba:88:95:f1:45:83:df:5d:71:a3:3c:80:28:7d:fa:93:5f:
0e:d1:26:8e:34:3e:15:5c:b9:0a:78:a7:2e:e8:8d:b8:4d:09:
c7:ee:0c:a4:90:5d:60:1d:0c:e8:53:79:d2:70:ca:00:ab:42:
a2:b8:3a:fd:e7:67:28:74:7a:84:ac:43:98:7f:ed:fa:ee:87:
29:f7:c6:2d:b5:ff:27:de:55:3e:a5:dd:01:9b:66:09:f9:d6:
c6:9d:f1:ce:9e:dd:4b:cc:dc:25:35:e7:ae:cd:51:b2:1d:4c:
f1:b9:c4:e0:f0:79:f3:41:b1:3c:33:57:5d:73:b4:19:3b:7b:
30:e4:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:32 2026 by rpki-client