Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
File: WjWLSErYf-ApwQHa5tLtgo2GBVM.cer (raw, json)
Hash identifier: 4jM8KrxIzOc/PzLNbUD+3zWu9X0P7j1YZj6FWlZZszs=
Subject key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B306
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 May 2026 06:52:45 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 103.5.220.0/22
IP: 124.158.192.0/19
IP: 180.131.160.0/19
IP: 202.55.32.0/19
IP: 202.80.128.0/20
IP: 202.92.160.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176902 (0x2b306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 7 06:52:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:43:88:a2:ca:9e:f2:80:a6:90:ef:d7:d5:
8d:75:b2:ae:76:79:59:ed:8b:75:7c:ac:b7:d8:03:
ba:19:e2:fd:79:6a:de:fa:d0:d4:98:c6:7f:51:b4:
da:3b:8a:63:ef:bf:e6:39:97:60:dd:ed:04:44:1a:
bf:40:56:e7:8e:27:b2:dc:4d:09:32:2b:b5:86:24:
c4:9a:81:8f:f3:8d:ae:7d:36:68:2b:eb:80:99:2f:
51:d4:bf:63:c6:1c:0e:95:65:92:a6:ad:9d:52:9d:
84:d8:86:25:8a:3b:3a:2b:e2:31:46:27:32:c3:9f:
c1:5c:f6:f6:ea:86:32:fd:a4:0f:21:8b:ef:af:31:
ed:ed:cb:04:17:60:6f:9d:3e:5b:07:ec:e6:4b:e8:
40:f0:17:31:a9:48:30:ad:64:83:a5:1f:9f:92:75:
db:d7:8f:c1:6b:18:59:fc:69:ac:d4:f0:8e:a8:e6:
ae:e9:74:12:89:0e:22:2e:02:90:f9:ba:41:43:b2:
69:03:97:61:bf:8a:01:e1:a2:76:84:8d:de:cc:03:
ac:9c:79:e5:61:f2:ea:96:5a:94:a7:14:b0:4a:50:
a1:09:41:4e:00:57:2f:2b:03:e3:7a:fc:63:7c:da:
31:5d:d3:04:92:d9:dd:58:36:f4:9e:9a:bb:ad:3d:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.220.0/22
124.158.192.0/19
180.131.160.0/19
202.55.32.0/19
202.80.128.0/20
202.92.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:4f:ad:f8:56:c7:1c:d3:34:fc:8f:ce:28:dd:7a:a1:41:bf:
5c:fe:68:81:b0:43:b7:16:8a:48:56:44:fc:5b:15:40:b9:d0:
27:6c:7e:6e:3c:88:c9:9d:1a:60:2a:21:7a:7a:f7:28:03:0f:
08:77:c6:92:49:08:2f:0f:cc:6f:6e:3f:1a:bc:cd:39:87:d5:
8d:73:45:f6:8b:0c:c1:4c:06:80:5a:d6:ee:0e:3a:9a:9b:b8:
ff:8e:cc:73:da:d2:ce:d6:a7:c0:42:9b:85:58:12:59:2d:6f:
d9:c8:2c:98:c1:b1:ed:cc:4b:6e:e9:4f:2f:03:71:89:e5:37:
38:8d:fb:08:6b:5c:cd:a1:c4:8c:80:2f:22:ba:14:cc:9c:3e:
5d:52:81:2d:3f:c6:55:dc:b9:a5:23:c1:7d:c3:2e:ae:d6:b4:
19:82:5a:ed:17:2f:60:3e:5f:c6:af:df:b7:79:c3:b5:bf:93:
7a:26:14:37:6f:66:0e:78:bf:c6:3f:e9:ca:d2:df:33:25:1c:
e1:7e:74:ea:8a:92:f6:87:4a:94:a9:ff:b6:4b:df:19:d3:07:
0d:56:cc:d3:0c:b6:22:71:d8:68:94:a8:d9:13:6c:5c:44:2a:
ed:63:48:92:f1:5b:00:71:2d:f2:27:50:82:5e:0f:3d:5e:b2:
cc:96:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:00 2026 by rpki-client