Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
File: lCSgucmNtjIaU5IMb0410jGc9G4.cer (raw, json)
Hash identifier: 1Utoi2L0LbC4NWdSkvMeR8pmHd47sZAGo6IqmWYkbig=
Subject key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A3DF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Mar 2026 01:19:21 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 103.27.244.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 04:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173023 (0x2a3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 12 01:19:21 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:5a:3a:68:ac:28:78:e6:00:03:16:f0:7c:
21:f2:f7:1d:00:16:80:a8:14:85:be:0b:6e:22:6c:
bf:cd:8a:7a:f2:99:4f:ff:38:07:60:5f:97:c7:3d:
d0:a8:c6:bc:cd:16:91:1c:cf:5b:14:7f:2a:4c:f0:
93:84:8c:9a:f8:99:ca:bb:3f:95:80:6b:b3:7b:36:
22:83:48:48:09:dd:82:42:2d:8f:f6:5a:65:e9:fa:
f7:86:f0:69:56:f0:cb:da:30:a4:54:ed:b5:1f:d0:
07:8e:7f:bc:56:72:df:3e:95:32:50:9c:0e:19:9a:
9e:ac:6c:f3:5d:db:c4:27:29:be:76:12:2f:c8:90:
2f:e4:ee:14:f0:7f:71:8d:01:a3:c1:2d:9f:20:83:
f1:a4:7e:dc:f0:c9:63:a1:4c:b5:1b:40:9c:31:84:
74:d4:3d:93:8c:df:94:8f:5f:0a:38:8c:36:c6:8b:
a3:1a:bc:40:27:64:3a:3e:c0:6d:8e:8f:57:3c:1c:
b0:b1:c2:b4:77:1e:38:0d:46:60:0d:99:80:de:63:
ce:da:ad:3a:9d:67:84:f0:1f:5d:ae:e2:33:eb:4e:
d4:d6:ea:08:b4:f0:cf:87:00:1c:75:b9:45:5e:71:
d9:e3:93:87:35:91:14:11:c1:70:79:ee:27:cd:70:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.244.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f0:97:b0:3b:9e:00:a0:d2:ca:88:3f:23:27:d4:37:1e:ba:
0f:60:36:05:0e:37:fd:66:b0:fd:62:a9:09:18:5f:57:af:e6:
b2:f9:9c:75:29:9b:ec:5e:78:b5:b1:91:d6:73:f4:75:4d:c3:
ed:02:80:58:ff:00:01:79:71:2c:c7:3f:a3:45:2e:e1:52:e2:
b3:98:5d:05:98:00:e2:4b:20:1d:93:00:ea:50:ce:6a:a1:2f:
81:22:78:6c:16:80:b3:25:a2:ce:b8:f8:66:29:98:8d:e8:b9:
68:9d:b2:c0:a4:91:86:e2:c3:be:c3:8e:52:03:c2:5f:02:d1:
4b:c5:05:03:3b:4b:d7:6a:cc:7f:ed:df:9d:5f:24:e3:af:36:
e4:1e:86:fe:ad:e7:b9:65:93:80:76:d3:d4:de:ee:ea:e7:fa:
ea:21:e6:c2:25:27:39:8f:ca:ff:a0:1e:62:af:a6:44:f7:48:
b8:00:de:54:38:bc:0c:02:d2:e9:51:be:78:cb:d9:f9:51:1c:
d4:45:8b:c1:7b:1d:12:f4:7b:8f:8c:bd:81:03:4a:2d:80:4f:
a2:a2:86:7d:d9:5f:8b:0c:8d:14:74:fe:9b:7c:1a:d9:98:da:
44:c6:67:0d:a3:8d:3d:5e:24:29:2b:6d:7d:6e:f3:a1:dc:d5:
c8:3e:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:26 2026 by rpki-client