Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer (raw, json)
Hash identifier: +qMP+Egt0KW7r10uXe/Yb7JsMjfc6W4BpHvvWBVY7o4=
Subject key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A409
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Mar 2026 14:18:33 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.180.114.0/23
IP: 2400:52e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173065 (0x2a409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 12 14:18:33 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:39:b5:d1:1e:97:86:eb:9a:55:99:7b:7e:
c1:62:ee:39:71:73:67:72:de:d5:0d:11:51:a6:7b:
6d:21:1b:22:d3:01:57:64:b4:0f:d0:74:8f:22:eb:
80:1e:a1:23:e8:3d:ca:15:66:82:05:1b:b3:5b:77:
21:a9:fd:22:1c:89:b7:02:3b:07:c0:26:30:13:d1:
e6:73:85:48:2f:3c:29:96:7b:8e:04:90:9f:9a:31:
ec:c2:95:60:16:e2:c2:75:35:c4:74:fe:e6:b0:8d:
59:d0:56:e3:71:51:3b:b1:23:89:35:1f:ad:41:66:
5e:d7:d4:63:93:a6:92:9f:97:c0:1a:54:9d:d4:73:
3e:6a:65:fa:a8:57:aa:af:19:8a:ca:db:6c:f1:1c:
4d:96:b3:be:71:18:25:6a:7a:22:bd:cb:dd:14:8b:
89:b1:50:cd:3c:3a:34:42:21:f5:84:57:aa:7a:29:
35:27:ab:bc:6a:72:d3:5c:a9:d2:8b:b0:b1:6d:64:
b6:f9:d5:96:2c:33:00:3b:30:b1:61:d8:3e:fd:0c:
59:13:79:7a:c1:17:54:87:d6:d3:7a:6b:cd:51:ab:
6f:30:a7:2a:8f:af:31:b0:c4:04:33:fa:83:c4:61:
97:1a:fb:b6:38:c1:20:6d:16:3f:d7:0a:db:b1:5b:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.114.0/23
IPv6:
2400:52e0::/32
Signature Algorithm: sha256WithRSAEncryption
81:58:a7:a1:fb:03:d8:d1:7d:b5:ed:80:dc:0e:4e:62:11:fa:
95:b1:ed:e2:12:4b:83:cd:e8:97:d7:8a:8c:2e:e9:67:f2:95:
f0:d9:51:fe:53:7e:48:87:b0:5c:08:de:74:11:94:f2:a1:23:
1d:b7:c3:7f:f2:cb:54:29:04:71:06:24:29:74:52:b0:e3:03:
3e:04:2a:88:8a:44:93:90:a3:c8:c1:a3:23:e2:1a:1d:9c:c6:
6f:38:ec:a5:a9:bc:da:6e:81:c4:81:97:22:b5:1c:f9:8d:14:
e6:7e:4c:69:57:50:5c:79:72:c9:af:55:c1:fa:02:ae:18:90:
2e:91:ef:5c:36:11:9a:86:11:3c:bb:92:35:8f:6c:64:c7:4a:
6b:fc:44:cd:7d:87:2d:90:d3:59:0d:d3:35:a7:a1:cf:ad:d5:
d5:46:67:2a:2f:81:6a:17:e9:84:68:e4:2a:43:de:dd:40:d6:
8e:20:f7:f7:c5:96:1e:e5:04:94:a6:b4:8e:9b:68:cd:0a:3f:
92:63:c2:29:97:7e:63:13:60:7a:70:a1:65:51:ac:31:ed:c9:
1c:ad:37:ab:88:f6:32:2f:06:9d:79:d9:01:8f:1b:5c:70:2a:
dc:47:d8:78:c4:74:22:45:23:ad:5b:f6:fc:d3:18:7a:c0:8a:
cf:b5:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:12 2026 by rpki-client