Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
File: oYVUdv79oHy8rTr5lUhEq6B7dyw.cer (raw, json)
Hash identifier: GET95XTwi1IowjZaDYD1D8pGLd+WMeRybTYFrFpClT4=
Subject key identifier: A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B389
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 09 May 2026 03:54:08 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 43.251.124.0/22
IP: 103.224.68.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177033 (0x2b389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 03:54:08 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C909E, serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:d5:af:bc:a9:03:22:dd:66:c5:af:fa:e4:
11:ee:bc:33:18:e7:8a:62:5f:6b:bb:bd:83:10:2b:
55:9c:e2:74:31:5b:3a:43:f8:04:dd:30:4f:e8:91:
48:fd:51:6b:f1:24:58:b6:bd:5c:06:30:a6:9a:22:
79:f9:33:84:34:84:66:f7:4c:e0:10:d8:aa:c3:bc:
6a:a1:dc:f2:7a:31:42:4c:fe:ea:d4:11:7c:2f:78:
49:4d:89:6b:50:97:26:06:3c:18:9a:45:f0:f5:94:
89:30:c9:2b:98:94:08:70:55:87:09:56:98:07:c1:
cc:61:1d:25:58:c7:ae:47:8e:7e:e9:a3:88:1c:5e:
bd:3f:37:81:53:7e:5b:ec:d9:ca:61:7a:ed:1a:20:
63:ad:da:d9:01:ca:49:d2:f7:b4:b8:6d:67:2e:d2:
63:a8:9a:85:e1:77:74:4f:69:27:f8:1d:b2:5c:d6:
89:0d:47:22:3d:81:85:3a:d1:3e:ac:67:cf:5c:f3:
ba:10:fd:a3:84:01:a3:1f:c4:cc:69:3b:95:7e:3e:
5a:90:e3:2a:41:71:19:4f:b4:db:a5:32:7f:2e:08:
12:38:ec:eb:25:64:56:f0:7a:ab:80:ea:38:5b:79:
ce:14:a8:8d:1b:f0:36:27:4e:d8:d2:16:00:93:34:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.124.0/22
103.224.68.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:c0:dd:b6:a1:5a:12:d2:c7:00:e2:ed:30:d9:4c:29:35:e8:
6b:5f:88:f6:87:42:36:85:f7:44:78:0b:ca:bc:7b:d9:30:9a:
fc:80:4b:b1:39:a2:cb:27:5a:30:60:a4:56:8c:58:06:4f:5c:
ce:8a:16:56:88:39:2a:b2:12:29:65:b3:4c:8b:11:03:02:0a:
1f:7f:05:a3:c9:21:b0:4d:7f:75:2f:eb:e3:b9:7b:99:01:23:
e8:d4:79:20:39:0f:20:49:2c:01:76:0f:52:a0:cc:a8:b9:eb:
3d:be:cd:43:67:bd:46:32:de:ed:ba:6e:a8:b7:d7:f2:e3:bf:
c7:be:f9:ea:79:84:59:3d:a2:75:2d:ed:f4:6b:5a:a3:99:a8:
1c:57:57:0a:e7:3f:19:d9:42:18:84:49:97:15:da:bb:2f:f5:
19:85:1f:a4:85:63:83:82:8a:97:f6:43:85:7d:d8:60:e7:02:
59:95:a4:79:c3:c1:12:96:11:41:cb:0c:09:2c:5f:d2:29:87:
d1:a4:6b:d3:44:e8:35:ce:55:01:e4:88:7e:ce:06:84:22:4a:
e7:d3:68:2d:f7:5c:9e:38:22:4a:d8:58:83:05:41:85:55:5f:
74:78:72:13:d3:c4:b8:72:6e:c6:32:37:4b:72:db:b9:cd:c2:
df:f5:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:47 2026 by rpki-client