Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
File: RpDBBq64PHTXvfOk55k8CYErrPw.cer (raw, json)
Hash identifier: nkWEv4AIv7L7VflSMFs2PsXVAKnJIgeUbBpYU5iVO30=
Subject key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C68A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 12:50:48 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 111.68.0.0/20
IP: 2400:e7c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181898 (0x2c68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 12:50:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:5b:99:8e:21:1d:16:02:44:a1:93:5f:1f:
41:ed:7e:0f:bc:55:6b:9f:77:bf:fb:57:9e:47:48:
19:98:d6:0f:5a:46:b5:46:87:ae:5d:57:7d:7d:fa:
64:87:95:7a:80:16:38:47:39:17:80:cc:07:5c:d9:
d3:a9:f4:58:d1:ee:9b:3f:bd:15:bd:12:d5:0b:04:
b2:2d:0f:55:80:1b:9a:02:1d:3d:f4:fd:72:33:ea:
70:6f:4b:77:9f:36:55:13:4c:03:29:9e:e8:48:20:
c8:eb:e4:b3:fe:93:80:fa:66:83:87:c4:6d:9e:56:
a1:b1:b9:f3:66:17:cc:e2:80:fc:b9:0e:33:94:f9:
1c:70:23:4e:8e:5d:1e:50:42:68:9b:12:42:69:7b:
33:6a:27:99:ad:48:49:ba:b8:f5:d7:32:ef:1f:95:
55:a3:d7:aa:ee:12:56:ad:6a:b9:15:62:1b:43:fe:
83:af:84:a5:a2:5b:4f:b2:6f:8e:85:d3:35:4b:8d:
de:22:5b:57:d9:51:88:9e:15:ba:22:54:71:d9:bb:
e1:8b:1b:1c:0a:af:d1:d4:39:7c:ea:ec:25:45:35:
d4:97:5f:ad:42:70:f9:19:a3:ee:d7:0c:25:e9:7b:
c0:d0:02:45:c3:95:8c:9d:c8:bb:af:14:5c:7d:a0:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.68.0.0/20
IPv6:
2400:e7c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:00:6b:62:12:64:d2:de:07:e1:ac:46:df:01:fc:ef:e6:24:
9b:0d:9d:53:31:06:00:c9:59:51:cc:b7:78:f8:fe:b6:cd:38:
c9:2c:1a:13:a5:72:0f:6a:09:1a:de:f9:66:fc:62:da:63:aa:
f9:4a:85:7e:10:0c:3d:65:2b:76:55:51:d4:dc:23:1b:0b:cb:
20:22:5e:cc:14:c0:64:8e:12:54:45:ac:30:c8:13:40:fe:da:
30:c9:ee:30:f7:2b:4d:4d:f7:fa:a0:41:e3:9c:c8:7a:e0:ac:
2b:2c:fe:56:58:d6:cb:0e:50:4e:e6:02:64:27:77:c1:d3:8c:
de:48:6a:7e:c4:28:bc:68:3d:5b:ed:e0:2b:7c:f2:5d:85:db:
4c:83:76:a0:41:8e:c7:7e:c3:5c:78:06:fa:86:39:5e:b1:06:
11:f5:cd:ba:60:18:7d:76:d2:93:50:a5:f9:ac:56:18:81:6e:
05:6b:e8:0b:80:3a:3b:eb:91:be:e6:d3:ac:d7:ee:11:81:71:
53:16:79:9f:d1:5d:7d:f1:27:14:2a:26:e0:bb:51:d0:42:48:
cb:4b:12:32:57:27:15:bc:73:c0:69:49:84:8d:e9:e1:31:e4:
09:1b:92:2b:4b:53:2d:b9:7b:2e:ef:0a:e7:c5:96:a2:5a:66:
af:ef:fa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:29:00 2026 by rpki-client