
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
File: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer (raw, json)
Hash identifier: l5PoMM8va0OM6rxzbo+i2Q3oJFa+YpakBhI8uM8s7H8=
Subject key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C5A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Jul 2026 08:04:47 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 18402
IP: 203.78.8.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181664 (0x2c5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 17 08:04:47 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:af:45:fb:f5:8e:ad:5c:4e:03:6a:f6:79:
4e:0d:e6:2e:1a:63:b4:fa:32:57:7c:4a:28:a0:c0:
28:14:8e:c3:5e:ab:62:4a:f4:4b:f2:88:21:38:7f:
5e:06:49:55:79:90:a1:05:5f:92:c0:a2:4a:36:db:
2e:4b:52:a5:00:1c:0b:44:f7:c6:ad:f4:8e:85:2c:
15:ab:9d:0b:db:0a:7d:7d:5f:9b:d5:78:b8:64:ac:
d5:f2:ef:e5:68:e0:e1:8c:de:4f:a9:9d:b0:31:f1:
3d:41:42:12:81:6f:1d:dd:22:b1:67:18:62:75:1c:
16:58:af:0c:e6:c8:77:9b:1a:5a:c0:86:36:e7:e0:
3b:d0:27:28:67:53:5c:1d:a0:79:68:73:78:c2:90:
4d:84:88:f0:0e:6a:c4:c3:38:65:48:c0:fe:c6:5a:
7d:2d:db:2e:90:29:01:35:03:26:ef:da:f0:6b:de:
fd:77:d3:7d:7e:67:9d:99:3b:e6:9b:c2:c3:22:3b:
ee:ef:a0:17:ca:af:5d:53:af:80:91:d5:88:77:44:
bd:7c:98:07:2f:c0:53:4d:0c:5d:02:4e:4c:3c:b4:
40:ac:8b:58:46:e9:c3:cc:ad:0c:bb:1a:25:88:01:
c5:05:07:e4:b6:91:e9:e2:d9:43:22:1b:17:26:3f:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18402
sbgp-ipAddrBlock: critical
IPv4:
203.78.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:e7:03:6e:d0:41:21:76:d0:ef:6e:e9:d4:d7:42:b7:4f:f0:
2a:ac:b5:ac:b4:9f:46:9a:12:9e:45:a3:9c:29:3d:de:d9:11:
89:a9:a0:8d:d1:19:ad:3b:eb:25:50:62:a3:6b:f5:d3:78:a0:
50:a7:98:86:e8:fc:d3:e6:94:84:b3:8f:2c:4a:b5:c8:0a:86:
b7:3f:d7:e5:99:8b:e6:cc:cd:53:af:d5:4a:2d:a8:76:cc:82:
45:60:71:36:09:a9:81:14:51:e0:91:06:9b:30:98:35:10:3d:
b1:c4:43:b6:1a:6b:6a:ca:69:a5:bd:a6:9d:15:c9:24:5c:c0:
61:b8:56:2d:ea:50:47:40:68:43:44:73:d2:96:27:9f:48:aa:
d9:c4:41:76:f4:9e:8b:74:2d:6e:a8:16:93:cb:a4:89:2d:3d:
5b:fc:2a:36:e4:f4:ba:7b:79:b2:8c:97:92:00:00:fd:2c:7a:
97:48:64:01:65:f3:b1:08:ab:7b:b5:be:8d:ac:99:f0:b2:c4:
98:33:0c:23:87:00:24:1e:12:4c:fd:71:f5:eb:32:11:fe:ea:
5d:a5:e2:58:fa:c1:5f:0a:3b:9e:d2:21:59:be:6f:d3:9e:a4:
7e:ab:bf:7c:f7:04:68:15:14:49:b2:84:14:9f:25:0b:a2:81:
6b:66:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:41 2026 by rpki-client