Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer
File: XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer (raw, json)
Hash identifier: 3ipj0f4V1NmVyRxfo9IVUsRYtGZxCo4NQBxPuMldlp8=
Subject key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C2DC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 04 Jul 2026 14:33:23 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 103.65.180.0/22
IP: 111.223.244.0/22
IP: 2400:b1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180956 (0x2c2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 4 14:33:23 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:69:6a:2c:f9:0a:03:c3:db:dd:1b:ab:5b:11:
2f:2f:f5:52:ff:3b:21:2f:70:b7:e1:2b:bc:6a:e1:
fb:93:17:c6:f3:6e:5a:b8:43:07:7c:07:53:5d:61:
34:2e:63:c7:9c:3d:ce:e9:06:ee:6a:d9:f5:f9:bf:
c8:cf:0f:10:ed:af:d6:fb:3a:57:50:e6:50:33:56:
34:f6:f1:54:b9:03:3b:c2:4f:37:32:c3:70:57:9c:
12:c0:db:ec:9c:26:04:9f:d5:a2:d4:e1:89:8f:2e:
51:a1:42:97:5f:8e:33:e2:15:bc:da:8f:18:7c:fa:
1b:89:85:01:7d:85:c5:05:db:b3:99:07:12:c9:cb:
01:cf:d2:cd:ae:e6:0f:c1:b0:e4:8b:e2:a3:27:b0:
79:41:5c:76:6b:f4:d9:1d:89:0e:d8:7d:53:a6:02:
9b:5b:22:07:e5:85:5c:3b:70:40:2f:10:f5:39:6f:
8d:d7:7a:64:82:65:33:25:69:b9:d6:2f:85:b5:84:
7e:39:bb:cb:24:95:d3:d7:07:4d:10:58:83:36:93:
71:15:a2:ba:fd:47:f5:47:2d:06:19:e4:bd:26:31:
ed:c2:5e:98:6a:6d:a4:2f:12:f0:a6:44:6a:0a:9a:
54:fb:01:72:4f:c3:ad:d5:bc:6a:8d:50:9e:1e:18:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.65.180.0/22
111.223.244.0/22
IPv6:
2400:b1c0::/32
Signature Algorithm: sha256WithRSAEncryption
14:09:dc:68:06:51:ad:dd:ab:fc:16:f0:d8:4b:eb:58:e9:62:
79:e8:a4:2d:99:88:69:4a:f9:34:55:a5:30:8b:54:63:a4:fb:
00:33:cc:6a:4d:f0:98:14:0b:27:59:25:0d:3f:06:83:2f:88:
10:28:43:d2:ec:1a:79:eb:01:af:b0:a1:db:48:ed:d0:b7:7b:
8e:56:a7:44:85:13:4c:b4:b5:0a:d2:1b:71:57:a2:51:98:fe:
27:df:22:8b:ed:39:ef:3c:37:cc:42:e2:8a:2a:b4:cc:37:04:
71:8b:98:95:3c:2f:72:6d:1b:ee:0d:bc:2a:55:e7:ca:f5:5e:
9f:04:6d:d6:70:60:3c:7f:56:39:90:4e:99:98:40:b2:a2:9a:
ff:2b:a9:26:68:a7:f4:63:61:5f:cd:0d:93:21:eb:ee:a0:79:
5b:7a:5d:e4:b7:f5:73:ac:03:68:8b:f4:8c:c9:af:e6:8c:d7:
f9:07:d8:04:74:06:f0:94:3d:88:7d:e7:f5:3a:19:5b:80:08:
e6:15:3c:44:b1:9a:f9:bf:3b:a2:cf:54:1f:66:ac:dc:e4:1d:
49:48:e2:25:bc:42:72:94:44:18:fe:44:93:19:d0:48:7c:ac:
d4:73:e2:99:ca:c7:c3:43:7f:20:4b:a7:2b:9e:39:3a:e7:32:
cb:7f:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:56 2026 by rpki-client