Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
File: TMGqg6KKEDdySbbqS4nZ7doGqXE.cer (raw, json)
Hash identifier: 57KgTePu3vICAgHJZ6Xs9LPyAjzJWztSPsbSwaUKve0=
Subject key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C472
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Jul 2026 14:41:42 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 43.228.196.0/22
IP: 103.26.180.0/22
IP: 2001:df4:2000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181362 (0x2c472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 10 14:41:42 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:75:8d:0e:58:7b:1f:48:4b:76:c8:77:09:
f5:50:2d:7b:09:00:d5:c3:5b:c2:f3:f0:28:1e:69:
62:70:49:aa:74:3a:dc:60:f4:be:8a:4b:f3:f9:4f:
1e:e2:54:b9:9e:02:e0:1a:1e:b1:9a:84:ba:c4:d8:
82:e3:bc:3a:b1:fb:f6:5f:dc:6d:22:cc:fb:e9:56:
f3:c7:85:2c:b1:d7:a1:5f:46:ff:dc:69:88:d3:fb:
dd:8a:1f:fd:7b:59:cd:85:78:58:f6:fe:2b:16:5e:
9b:8f:76:0e:97:21:b9:95:62:9f:25:9e:63:aa:da:
63:a3:b4:d8:ca:74:37:30:c3:ac:61:4a:23:0f:17:
0e:4f:7f:0f:31:f9:a5:bf:37:fa:31:bd:e2:4a:24:
4d:9d:1d:9f:f6:1f:61:bd:1d:e8:01:b1:db:a1:44:
eb:bf:e7:91:36:b2:65:60:42:eb:1c:10:53:4f:4d:
15:d4:87:f9:62:f6:80:f7:ca:5e:26:c5:c0:5f:5f:
cf:29:66:ae:ba:b6:78:62:bd:d7:6d:a1:c6:6b:ee:
ae:33:d8:58:2e:e0:5a:44:36:1b:3a:11:08:6d:a1:
72:04:fc:5e:20:20:b2:af:a9:eb:61:f0:8c:97:25:
ec:ce:85:2f:b0:58:c4:a3:d9:26:84:7c:1d:ed:66:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.196.0/22
103.26.180.0/22
IPv6:
2001:df4:2000::/48
Signature Algorithm: sha256WithRSAEncryption
0c:58:fd:dc:62:67:0f:f0:64:f1:8d:d4:1e:cd:29:56:f8:3c:
e2:85:3b:75:37:a3:73:ff:35:0a:a8:25:94:44:bb:15:a8:c9:
1c:91:01:cf:43:75:18:25:ed:49:7a:c9:59:c6:f3:0e:b0:86:
c8:ad:3a:d7:4b:99:ff:09:fa:6a:47:7e:e9:f6:1c:ec:1e:ce:
b9:00:f1:91:7a:7f:86:e3:e6:45:83:3d:f7:36:0d:4b:3b:a7:
f8:14:ed:aa:b3:b7:be:60:3d:d6:d0:16:e9:fd:ee:16:d1:6d:
f5:18:16:d1:a5:40:99:db:a3:57:05:0d:d6:5e:bd:40:9d:50:
99:df:ac:2e:a7:20:68:a6:d9:3f:44:ec:52:a5:2c:5e:c3:c8:
5d:95:5a:06:cf:a4:67:d6:aa:21:b8:c1:34:76:39:6e:bf:35:
d4:60:4d:be:dd:c5:c1:b3:8a:28:f1:7e:d6:1a:e1:49:3b:19:
a4:8f:d2:0c:5e:fa:da:57:67:8a:b1:6e:4d:6e:4e:ee:f7:26:
92:73:b7:c1:c9:61:39:4a:6b:64:92:da:4f:77:2f:03:2a:f5:
20:ea:91:c1:41:3c:8c:ea:2a:ae:cc:34:6c:4f:91:c9:40:5e:
0d:7d:f6:a2:8d:25:dd:3a:0c:20:23:8d:ad:62:97:64:30:5e:
99:0d:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:03 2026 by rpki-client