Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer
File: Xa8F0ZASWq672xrRAQ6jhBdPc7A.cer (raw, json)
Hash identifier: m7WkyT0g0ZPNGVERuKeF7qxyqgQ921z/DUnbR83iXmg=
Subject key identifier: 5D:AF:05:D1:90:12:5A:AE:BB:DB:1A:D1:01:0E:A3:84:17:4F:73:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CEE5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Aug 2026 09:08:57 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 133779
IP: 39.109.0.0 -- 39.109.48.255
IP: 39.109.53.0 -- 39.109.54.255
IP: 39.109.96.0/23
IP: 39.109.124.0/23
IP: 2400:6d60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184037 (0x2cee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 21 09:08:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CC8BE, serialNumber=5DAF05D190125AAEBBDB1AD1010EA384174F73B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:41:4b:6d:a4:67:6f:82:a7:59:7b:4f:ce:
8e:5c:46:f3:f9:9b:03:0d:64:23:9f:64:a5:f5:7a:
1f:f6:f4:c1:19:97:70:99:dc:e0:7c:75:a5:69:a6:
bd:fa:cb:12:3f:d4:53:f0:89:87:b9:3d:9f:b0:25:
dd:87:1b:40:9c:e1:5d:19:93:06:83:55:4b:ca:73:
4a:8f:da:a2:3d:d7:3f:c8:82:14:85:ab:d2:c2:66:
f1:7d:84:ed:89:93:e6:71:e9:46:4c:07:d2:3d:eb:
87:41:51:68:f8:32:30:ab:7c:85:2c:e5:73:0b:07:
4a:4f:7e:28:db:18:9d:54:d2:2f:e8:16:a8:49:d7:
7b:5c:22:a4:1e:07:bc:ff:65:c7:b8:c1:a8:fc:df:
52:25:40:10:5e:35:53:86:98:79:22:7b:2a:b5:c7:
5a:48:07:e5:2c:51:31:bd:23:f6:09:60:03:28:bc:
47:68:35:95:8d:7a:bb:ca:99:7e:e9:4a:59:46:3b:
c6:ff:5f:28:b2:78:d7:76:ad:ba:39:1d:f1:fa:b1:
91:1a:24:89:05:c3:cd:2d:7d:a7:25:61:2d:83:52:
b0:41:10:f0:26:ac:c6:2f:8b:ad:03:8b:d8:78:f4:
18:30:81:9e:d4:f4:7d:e7:4e:16:f7:2e:e6:e9:fd:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:05:D1:90:12:5A:AE:BB:DB:1A:D1:01:0E:A3:84:17:4F:73:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC8BE/127257F48FA711F18CCC416F6011F970/Xa8F0ZASWq672xrRAQ6jhBdPc7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133779
sbgp-ipAddrBlock: critical
IPv4:
39.109.0.0-39.109.48.255
39.109.53.0-39.109.54.255
39.109.96.0/23
39.109.124.0/23
IPv6:
2400:6d60::/32
Signature Algorithm: sha256WithRSAEncryption
9e:05:29:5a:13:b2:74:7c:75:7e:25:34:00:c7:3b:a1:27:62:
e0:e6:24:61:79:e2:67:15:1f:74:30:a8:f1:9f:ca:25:5a:7a:
a7:77:f4:1f:82:8c:6d:a4:95:db:df:67:e7:fa:84:bd:71:c8:
24:b7:7c:11:1a:70:f1:98:10:89:2e:ee:22:4d:9e:9c:02:3f:
19:29:0d:c5:2b:83:65:86:7c:af:69:61:e6:83:c6:53:3a:c9:
1f:1e:36:79:d9:e0:e6:5d:6e:34:5e:c2:3a:e9:a6:65:c6:db:
e2:09:c0:2a:3c:7a:d3:42:36:d8:db:1b:ad:f3:0b:67:75:60:
ac:8d:1b:3f:a1:2a:b0:0b:0c:66:bd:be:32:86:47:59:57:63:
97:bf:86:9b:65:97:13:70:6f:ec:46:08:db:67:16:02:60:88:
d4:19:0a:23:b6:75:76:61:c7:a0:cb:53:8d:81:f1:55:bd:d9:
e4:91:22:11:cf:af:f5:b5:74:a9:1e:e7:aa:43:79:95:70:ed:
ab:2f:c9:6c:9a:23:fd:aa:ef:3e:c1:4c:6e:5a:f9:e3:e4:34:
a4:70:cb:3c:3f:8e:15:64:f7:9c:87:e3:87:06:fc:4b:5c:60:
06:69:42:c2:51:42:eb:f0:3d:d0:5b:34:e5:a2:a6:69:1c:40:
35:f4:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:04:23 2026 by rpki-client