Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
File: j4RQ6hjtZj3XYxNayPnBormb2W0.cer (raw, json)
Hash identifier: uh7K7Z4QdM6qHI+qM9c5aTzncxa+lTm2HeoK2uLgPxs=
Subject key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A28D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Mar 2026 12:50:57 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.207.28.0/24
IP: 2404:2780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 01:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172685 (0x2a28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 5 12:50:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:f4:21:e9:00:a1:93:ed:87:8e:92:9c:67:
7c:ab:51:b2:58:43:76:6b:df:81:de:24:82:07:cd:
06:9d:ff:06:01:e1:c5:cf:33:92:6a:c1:c2:6c:39:
be:18:27:92:62:57:fc:05:65:3a:9b:42:05:1b:6e:
25:53:49:2c:9f:53:3f:3b:8b:79:94:b9:1b:63:8b:
4d:a0:a1:8b:26:81:3e:35:49:bd:ce:11:b6:a7:03:
17:c2:17:46:cc:fc:7c:d7:39:0d:7e:5d:b2:03:c2:
8e:07:43:6b:98:66:4c:c6:10:4a:19:be:96:16:cc:
25:14:6f:7a:9b:17:16:0c:7f:78:e1:68:cd:3f:94:
a0:4d:17:d5:c6:7e:6c:7b:76:44:34:c8:c1:92:2f:
fb:1d:72:5e:76:4c:67:ac:8d:08:4f:bc:b3:14:8d:
c2:50:1c:7d:6b:18:9c:49:ff:04:31:66:bd:d0:97:
0a:dd:7a:b0:ea:9e:2c:0b:d6:4a:bc:76:70:37:5f:
e4:94:3b:34:ec:9e:63:e0:ed:7d:5d:d5:73:44:68:
24:c7:fb:b2:f9:7d:31:ac:98:d4:63:bb:43:ed:06:
9e:8a:d8:67:37:db:1e:bf:f1:0a:45:b4:2b:eb:6c:
f7:77:56:d8:de:18:02:b9:6f:93:93:83:30:ac:1b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.28.0/24
IPv6:
2404:2780::/32
Signature Algorithm: sha256WithRSAEncryption
1b:ef:c4:33:a6:90:96:0c:c3:8e:50:f3:b7:1e:5d:e6:a7:d0:
57:7b:1c:2b:58:6f:bb:b6:23:80:b1:57:07:66:51:7f:a1:e8:
4e:29:b8:3e:fa:fb:b2:17:80:51:60:ec:1e:cc:08:03:b3:59:
4d:84:fd:8f:53:f3:50:79:69:87:ce:59:7d:77:3b:06:4d:28:
46:6d:93:35:83:5e:ac:cc:e8:9f:89:55:58:1f:c9:f8:22:41:
13:21:ad:be:8c:66:ee:9c:83:39:0b:ac:38:0f:81:4b:54:04:
25:61:f3:eb:a9:7a:87:67:de:80:e9:f5:21:ed:61:7a:b9:98:
b0:c2:5e:94:75:8c:ef:3d:71:5d:3c:fc:f3:86:44:79:ea:75:
5a:f7:91:41:9d:ca:e3:d2:cc:42:58:fd:5a:66:26:aa:96:b9:
c4:97:25:5d:67:36:dc:53:be:a7:c4:aa:87:0c:68:ac:11:48:
ea:1b:71:4b:e4:2a:44:65:bc:cd:42:1a:41:ee:31:a3:2e:11:
3c:b4:db:7f:62:dd:a2:2d:2e:e3:6a:9d:16:25:70:2e:2a:d5:
d5:b6:e2:47:f4:b1:93:17:cd:c5:e9:2d:f7:48:b2:cf:a3:e8:
bc:5f:72:45:01:c7:02:ae:3e:e6:6e:a9:16:50:f8:24:a1:aa:
6b:fa:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:17 2026 by rpki-client