Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
File: TMGqg6KKEDdySbbqS4nZ7doGqXE.cer (raw, json)
Hash identifier: 4E7QWAVa2XyB6lzNleuJEUk/UipdvqzlJulej5oY8ek=
Subject key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A556
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Mar 2026 12:33:00 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 43.228.196.0/22
IP: 103.26.180.0/22
IP: 2001:df4:2000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173398 (0x2a556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 20 12:33:00 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:75:8d:0e:58:7b:1f:48:4b:76:c8:77:09:
f5:50:2d:7b:09:00:d5:c3:5b:c2:f3:f0:28:1e:69:
62:70:49:aa:74:3a:dc:60:f4:be:8a:4b:f3:f9:4f:
1e:e2:54:b9:9e:02:e0:1a:1e:b1:9a:84:ba:c4:d8:
82:e3:bc:3a:b1:fb:f6:5f:dc:6d:22:cc:fb:e9:56:
f3:c7:85:2c:b1:d7:a1:5f:46:ff:dc:69:88:d3:fb:
dd:8a:1f:fd:7b:59:cd:85:78:58:f6:fe:2b:16:5e:
9b:8f:76:0e:97:21:b9:95:62:9f:25:9e:63:aa:da:
63:a3:b4:d8:ca:74:37:30:c3:ac:61:4a:23:0f:17:
0e:4f:7f:0f:31:f9:a5:bf:37:fa:31:bd:e2:4a:24:
4d:9d:1d:9f:f6:1f:61:bd:1d:e8:01:b1:db:a1:44:
eb:bf:e7:91:36:b2:65:60:42:eb:1c:10:53:4f:4d:
15:d4:87:f9:62:f6:80:f7:ca:5e:26:c5:c0:5f:5f:
cf:29:66:ae:ba:b6:78:62:bd:d7:6d:a1:c6:6b:ee:
ae:33:d8:58:2e:e0:5a:44:36:1b:3a:11:08:6d:a1:
72:04:fc:5e:20:20:b2:af:a9:eb:61:f0:8c:97:25:
ec:ce:85:2f:b0:58:c4:a3:d9:26:84:7c:1d:ed:66:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.196.0/22
103.26.180.0/22
IPv6:
2001:df4:2000::/48
Signature Algorithm: sha256WithRSAEncryption
20:0a:27:75:1d:57:bd:54:35:93:91:26:48:12:e2:c7:82:9d:
8b:39:ae:09:c1:70:e8:44:2b:99:ba:6e:b1:c5:7a:28:f5:ea:
98:c5:42:c8:0f:6f:f0:64:47:f3:86:cf:f2:55:31:12:b3:37:
7e:6f:29:52:cd:32:ff:69:2b:88:a5:16:41:2f:71:24:a3:18:
31:67:92:95:85:c4:8e:83:15:91:61:32:56:c5:06:c4:48:26:
3f:ba:a8:6f:19:92:00:64:61:55:b1:21:40:ba:50:61:56:67:
92:77:6b:8a:a8:b9:35:d5:83:af:8e:99:0b:90:68:97:dd:bc:
f0:a9:d9:53:bf:00:71:c4:3f:53:c2:ce:59:5d:a8:9f:6f:20:
43:c0:8a:2b:92:7c:d9:2a:26:fa:21:69:3d:2a:14:69:07:69:
0d:17:d0:54:21:65:fc:59:39:16:9b:30:17:63:69:1c:92:bf:
6c:12:b1:4d:3f:b5:42:a9:36:49:4d:be:6e:09:1b:fa:70:01:
99:ea:9c:83:1d:2e:87:23:06:99:8c:e4:7e:c1:ce:ff:f2:b6:
8b:7f:1b:63:79:11:a2:94:0f:39:49:74:f7:83:70:b3:3f:94:
a4:fb:fd:d4:42:56:99:a4:83:ec:c9:0c:fd:87:5d:38:29:ba:
08:39:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:47 2026 by rpki-client