Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
File: naybVs-kN1sQyJkjPVX2Bx7wgyE.cer (raw, json)
Hash identifier: RkFlWXGU5hzwqAZf441+++P5G+evx81Dmk0p4J2I9xQ=
Subject key identifier: 9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B095
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Apr 2026 02:03:46 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 203.25.96.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176277 (0x2b095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 02:03:46 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91A3C2B, serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:a8:d6:6f:8e:76:14:00:e9:6a:ac:43:98:
7b:9f:c0:a5:5a:02:99:19:d1:6c:80:64:d1:02:b3:
9e:fa:ec:b7:87:4a:f7:00:84:7f:f6:2c:84:5b:9e:
fb:24:50:d1:75:64:ca:72:60:9f:be:5e:8e:6a:5d:
00:fa:c3:99:d2:78:db:8d:89:7d:f0:ca:77:e6:8d:
98:a4:a7:49:86:75:a2:b6:58:72:e0:d6:66:71:3e:
18:df:4c:4f:e0:bd:8b:38:9e:78:82:cc:c5:7d:75:
fe:0e:c2:18:5b:92:8a:d3:86:e8:97:10:fe:6c:ff:
28:0d:ad:9f:33:fd:d6:2e:9b:23:20:29:bb:76:1d:
09:2e:cc:71:2d:8b:89:15:17:5c:d2:8f:37:d7:c2:
ae:10:ba:e7:4b:9f:82:93:8a:d8:7b:92:6a:b7:d6:
c0:0d:99:19:2f:aa:f2:7b:2d:e5:fd:ca:71:50:3a:
2e:cc:2c:75:b2:eb:6a:f8:cf:89:cb:5d:64:ac:b3:
98:83:7c:92:d3:4d:09:e6:90:14:78:47:44:65:96:
c0:e7:89:28:05:b8:31:11:5e:68:8d:9f:6b:36:d1:
f6:b4:20:6e:74:96:0c:df:a3:5d:3e:50:52:d0:b4:
e4:43:00:93:07:34:24:f1:94:58:66:da:be:73:71:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.96.0/23
Signature Algorithm: sha256WithRSAEncryption
57:d4:3e:d9:5b:e7:ea:80:4c:f9:e6:24:6d:c9:0c:ca:3c:48:
5a:7b:1a:4a:12:e5:bc:8c:f9:5e:fb:7e:99:83:e8:67:ca:6e:
6f:49:36:31:f9:76:a9:86:da:4c:e4:60:4c:9d:6a:4d:54:19:
45:c9:31:0d:1f:71:84:88:ed:9f:bc:8e:6a:d2:ab:75:b1:85:
fa:ce:fc:20:f0:08:50:9f:a0:58:85:b6:7e:3b:ac:a4:05:ca:
1a:7b:5c:22:f8:56:dc:7e:34:af:01:7b:36:a1:c8:1b:b1:17:
a5:b2:b5:80:d9:8f:6f:2f:93:80:36:59:bc:6e:e3:6f:bd:f0:
17:fd:e7:9d:b3:44:4a:8d:62:8b:fc:9a:67:8c:8d:0b:a7:10:
d2:05:c1:b9:42:13:87:18:d4:4f:4e:1d:06:6b:52:88:4d:15:
5f:b6:3f:b5:cf:71:6f:55:95:d9:8e:0f:17:34:2f:a6:18:54:
e1:a1:98:d2:92:28:e0:e0:f0:95:33:92:49:12:f0:2b:e1:48:
07:a5:c7:97:66:3a:b6:e0:5c:45:ef:75:43:bd:68:43:ef:ce:
c7:d6:07:10:12:35:e0:46:f7:4f:ba:a9:84:1a:6f:b9:45:55:
8a:df:6f:f0:4d:de:ab:07:7c:c4:ed:52:fa:67:31:34:db:c6:
4f:2b:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:47 2026 by rpki-client