Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer
File: r8_0bpt9aQ0-itnal3CgDiHeQUs.cer (raw, json)
Hash identifier: CIO9WK7JDFVbxXs5pyygOiTa8aPpzOkGMyokJIZkuMc=
Subject key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A415
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Mar 2026 17:58:04 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 203.14.96.0/22
IP: 2405:b680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173077 (0x2a415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 12 17:58:04 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:6a:d2:32:ce:70:97:79:03:92:35:21:b2:
f2:44:7b:59:9e:54:f0:15:fe:54:9f:66:a9:7e:6c:
7d:0e:6f:a1:a2:25:79:93:2f:f0:cc:c9:68:dc:51:
70:54:33:34:9e:76:76:f0:0a:f7:30:99:91:51:01:
95:1f:91:8a:2a:27:aa:1c:48:d6:6b:07:9e:35:26:
16:9e:02:33:46:53:d9:cc:db:1a:b3:bf:4d:36:2a:
a7:58:02:25:93:14:8c:90:ba:26:60:6b:07:76:75:
0d:c5:12:25:c7:cc:62:f8:7b:df:bb:e9:27:08:61:
fb:18:22:36:7f:07:80:c1:95:48:70:0a:ed:7a:52:
2f:58:9b:d8:a8:bc:3d:29:bb:29:0c:a2:1b:24:38:
8e:54:f9:b8:88:fb:10:da:5d:37:77:e2:ed:e3:a2:
09:78:f7:0d:cb:54:bc:18:ca:7d:77:71:bf:d4:ad:
d0:0c:c3:57:f7:f1:5c:93:16:ca:4b:87:ac:80:45:
c0:c8:35:3a:b7:c0:8f:d6:ce:8f:ec:9a:b4:39:65:
21:b5:f8:b0:ce:20:03:b5:ed:59:d0:93:82:00:83:
15:79:8d:8c:e1:7b:c8:3e:6f:95:cb:a4:82:2f:3e:
c3:8d:b3:61:b4:f5:37:7f:14:63:f9:48:0f:54:81:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.14.96.0/22
IPv6:
2405:b680::/32
Signature Algorithm: sha256WithRSAEncryption
04:9e:b5:96:60:71:da:9f:1e:3c:86:45:fe:71:56:58:3d:84:
11:87:44:da:7b:cf:e5:ce:61:4c:ec:12:20:f9:78:10:4f:64:
80:7d:80:58:5b:76:d1:37:ae:5c:35:f2:c5:77:fc:79:20:ad:
83:85:0d:66:64:79:13:39:48:13:2a:8f:d1:23:d9:e9:cb:5c:
e9:14:88:0f:c9:2f:ed:b0:11:b6:2c:26:6b:0b:35:0f:89:51:
1a:e9:0c:fd:bd:78:56:ae:90:43:80:ba:63:46:2d:d1:53:56:
8d:35:2b:12:ef:ce:39:2b:cb:30:ad:96:af:60:7f:1a:62:67:
68:44:c2:2f:34:62:67:f1:9b:8f:d1:af:3e:21:33:38:2b:25:
c6:90:54:93:0a:0c:ef:87:4a:d7:d7:37:d2:58:2a:c0:18:91:
f9:6b:38:02:b7:ee:93:96:95:4d:50:7d:27:64:72:e6:80:a4:
b5:f5:7c:26:d3:76:37:03:59:08:07:6c:e2:ff:90:62:02:70:
12:10:a8:9d:ac:15:e1:06:6a:72:89:f9:11:27:23:6f:29:43:
10:6c:28:1e:d8:29:c9:84:c0:47:ab:eb:a9:63:0b:1b:97:cc:
21:39:45:3a:d6:f4:d4:54:82:ea:fc:78:ea:2f:da:4e:bb:f6:
74:70:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:00 2026 by rpki-client