Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.cer (raw, json)
Hash identifier: 0aQfVIOFVra9RTWmrQn/8rzzfnJK+8nqVw7eANVjvqs=
Subject key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A443
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Mar 2026 14:18:18 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 17666
IP: 43.246.164.0/22
IP: 103.35.136.0/22
IP: 111.67.32.0/20
IP: 202.9.96.0/20
IP: 202.87.96.0/19
IP: 2401:200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173123 (0x2a443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 13 14:18:18 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:12:36:1d:a4:9f:65:f0:60:9b:cf:40:97:
bf:83:26:8a:9b:d0:8b:8b:b1:65:95:e5:c2:7b:6b:
9c:c3:dc:14:01:5e:07:7e:e2:45:b7:d7:31:5e:0c:
70:6e:d3:2f:ec:61:f1:c0:17:d1:7e:66:72:1e:7e:
05:0d:f2:3c:97:5b:d6:ac:74:3c:48:22:59:5e:5c:
9b:41:2f:42:55:9c:55:dc:a3:a5:17:d6:a7:5a:83:
97:25:9a:b9:59:5d:74:52:bb:0c:6a:7a:30:67:4a:
03:99:5e:15:d3:d1:2e:29:bd:b4:d0:5c:d9:8b:fc:
a5:75:24:86:4c:64:9e:cf:a6:1d:43:e9:57:5a:c5:
27:01:9d:e0:90:f1:53:1e:e5:4d:1a:30:fa:80:27:
98:0a:5a:b8:49:2a:ff:37:53:c9:3b:01:d5:52:d5:
19:8b:1b:b8:79:be:f4:44:a1:03:ac:b8:d7:9a:bc:
cf:d3:46:bb:5d:e2:77:a0:4a:a7:d2:3f:51:bc:b8:
8c:21:09:f9:e8:8b:a5:91:66:db:37:54:48:f8:5e:
7f:84:3b:19:7b:bc:2c:2c:ef:ed:72:88:24:8c:d0:
12:07:00:31:72:34:8f:cf:ba:e4:b9:2b:9c:b9:05:
94:dc:f9:c4:1f:c8:28:fa:4d:6d:a6:ea:50:ec:fd:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17666
sbgp-ipAddrBlock: critical
IPv4:
43.246.164.0/22
103.35.136.0/22
111.67.32.0/20
202.9.96.0/20
202.87.96.0/19
IPv6:
2401:200::/32
Signature Algorithm: sha256WithRSAEncryption
8e:7a:24:01:68:1c:8c:ce:bb:ef:23:15:77:17:fd:cf:59:e8:
ae:df:3c:6e:94:7e:85:dd:17:12:07:15:fe:8a:78:3e:c6:a7:
d2:a5:15:57:a6:16:fd:48:47:53:b4:47:89:71:35:2f:a8:c6:
a0:6e:07:7d:32:da:40:2c:8a:68:9b:8a:48:e7:88:be:3b:f1:
a8:ba:ea:1f:f4:de:6e:9a:52:e8:c7:51:c6:9b:d1:32:59:d4:
e6:86:4e:2a:9a:a6:dd:53:48:a9:2a:de:ed:3e:26:7d:13:41:
82:00:7e:a0:4a:fe:83:76:d4:f9:7b:c3:7c:62:2f:89:bc:3e:
3b:01:80:b0:5a:a5:16:5d:b4:57:87:02:c3:b9:58:6d:88:49:
e0:74:f2:cc:72:3a:62:04:10:e8:63:18:ef:9c:11:e5:a8:5a:
3f:99:6d:55:84:49:c1:4d:55:32:75:b6:59:1c:6a:34:4f:8d:
ba:0e:64:70:b3:0c:24:1f:c9:e0:b0:19:3f:e5:f4:d1:1d:6d:
4f:42:69:70:63:7f:f7:51:f1:f7:3b:3b:3b:1c:23:88:cd:6b:
84:6c:57:64:70:9c:b1:b7:a3:56:9c:94:1d:bd:6a:94:27:02:
99:e4:c8:5c:f8:de:15:b6:15:53:d6:fc:e5:90:83:2f:e7:a0:
af:38:21:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:16 2026 by rpki-client