Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer
File: dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer (raw, json)
Hash identifier: uUkO6EcMOnyWVzLNkcQj1xrFPlEI5lNwmDYDf0hsDls=
Subject key identifier: 74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A599
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Mar 2026 03:38:37 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 103.243.20.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173465 (0x2a599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 21 03:38:37 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A913B25C, serialNumber=74F30CC619FD12201784963DDD581D0772F38E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:36:b9:04:51:50:f4:0d:7f:be:a7:b7:41:
6a:08:25:4e:5f:24:a2:84:e3:f0:01:7a:01:2f:e2:
5a:70:67:8d:85:bb:00:1d:7d:d0:18:91:0c:d7:8d:
41:82:3c:2d:e9:97:92:07:48:08:fc:89:56:12:1c:
31:80:3f:2c:a2:ca:8d:97:72:31:a9:3d:91:e1:7b:
ce:55:72:2e:ea:e0:a9:d7:fb:fb:1b:59:bf:43:34:
03:c6:e7:c0:b6:65:f8:49:59:e0:16:d6:9b:d2:27:
ca:e9:d4:92:e1:db:f8:13:e3:9c:c9:fd:d7:95:ed:
eb:ca:d1:14:b3:3b:15:ff:0d:c1:fb:9a:5d:b1:07:
18:77:38:3f:0f:2f:18:fe:4d:6c:56:c7:c2:15:2a:
da:6c:e7:32:d7:4f:51:82:31:0a:56:f0:c2:61:01:
7a:22:84:03:bc:2d:54:f4:18:8e:52:43:68:e6:11:
78:a7:1c:bf:2c:62:76:27:46:2b:7c:50:ee:54:62:
1c:94:4c:21:77:ae:63:33:67:06:b3:d8:46:57:0f:
c8:55:5d:33:6e:05:0c:09:d9:f1:1d:75:f7:d1:0e:
13:7a:f4:48:3e:84:c8:00:67:13:c8:4c:9b:6a:0e:
79:3d:f6:3e:3f:ad:4b:d6:73:5c:7b:f5:29:35:09:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.20.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:42:08:de:d9:34:2c:38:8b:7d:a8:e6:22:39:94:16:89:5c:
2a:97:08:a4:80:b7:92:12:d2:05:3a:84:87:78:21:6e:fd:96:
db:c2:1a:67:cc:ca:a6:d8:84:15:5b:a4:c2:7c:75:f0:d2:09:
09:a1:fc:13:1c:41:1d:cb:a9:ef:ea:97:92:76:21:28:ac:a2:
12:df:e6:db:b7:76:97:1a:50:94:32:73:76:dc:f9:a2:9c:e7:
b4:d9:5a:ca:85:cf:0a:ff:3f:ae:eb:07:59:10:71:b6:9e:ce:
10:5c:a3:55:4d:42:a0:c9:40:44:b7:81:aa:53:b0:5f:59:87:
41:d5:32:ca:a2:b6:dd:c3:d8:eb:35:8a:d6:f1:cf:91:6e:4f:
cd:11:1d:e4:22:05:aa:d9:88:58:5c:46:c2:83:c6:5f:24:cc:
d3:3a:16:96:b5:5c:eb:07:38:7c:29:88:1b:01:cf:14:b9:3b:
ea:89:58:1d:4a:9d:02:9b:4e:46:d9:68:ea:19:3d:0b:8d:e1:
33:28:a4:3f:09:4e:fb:28:cb:99:fb:5e:0f:da:b1:30:7c:58:
e3:d8:a5:96:06:5a:8a:71:ac:9f:ce:29:8e:03:57:df:35:f9:
5f:c7:fd:91:d7:ee:7e:64:ae:2e:ab:76:13:34:82:50:b2:14:
57:18:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:35 2026 by rpki-client