Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
File: wA8Frg-ptoCpG1bw0yHFGIwecSw.cer (raw, json)
Hash identifier: FFoNagRYIlik5BRz0b70s3arIFZpDaPjNkzyLz4ltR0=
Subject key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A3EF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Mar 2026 13:03:43 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 202.49.8.0 -- 202.49.13.255
IP: 202.50.78.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173039 (0x2a3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 12 13:03:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:12:f7:c9:9b:69:3b:44:5f:df:1d:89:9c:
e6:a9:92:24:9b:cf:1e:c4:29:b7:d9:88:fa:bb:63:
37:ce:c9:90:db:d7:92:7e:d8:71:4c:ba:51:58:aa:
04:55:a4:d4:96:bb:e6:d5:b4:8d:25:e8:18:f3:a8:
da:29:74:c7:4a:69:01:69:2f:82:5a:5b:59:c5:1e:
df:53:7e:f2:f0:bf:58:9a:af:8d:30:a4:d4:09:2d:
ce:a0:de:f8:68:4d:ca:bc:82:f6:e5:09:6f:d5:5b:
b3:fe:b1:d0:22:4a:0f:ac:bc:3a:aa:b1:bf:d1:b0:
7a:b6:e9:aa:97:61:19:2d:9f:d0:ec:e9:ff:e1:c8:
96:e9:5b:a3:0e:55:68:b3:3e:1c:46:e7:db:17:39:
88:2c:92:89:11:a4:55:fa:91:af:45:21:04:33:c5:
4a:44:33:ac:a0:d5:52:9e:0e:a5:3f:61:ba:1a:4e:
f8:7f:ec:77:57:51:32:2b:52:8d:80:35:f6:3d:fa:
c8:a6:c7:00:ee:07:d5:5a:fd:d2:34:7c:72:f8:8e:
51:6b:7c:99:4e:c9:e0:d0:b0:5c:14:35:d0:00:ea:
97:8c:0f:15:b3:87:7c:39:7f:14:3e:bf:57:a2:cc:
31:54:1c:81:fa:80:b3:e0:70:39:40:60:90:4f:48:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.49.8.0-202.49.13.255
202.50.78.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:14:64:54:dc:4a:02:c7:38:1e:3f:71:ba:fc:9c:52:20:d0:
d4:94:a3:33:ef:d2:d2:fe:3b:56:4e:bc:13:56:07:fa:42:8d:
d8:34:08:df:89:9b:3c:94:4f:9b:ff:2c:59:6b:c8:97:7b:ee:
59:60:60:89:69:57:8a:bc:fc:26:9d:c0:7d:6e:39:a2:58:c9:
04:1f:75:a3:f6:50:19:ce:77:f1:65:6b:21:66:8d:6f:73:b9:
3a:fe:84:54:50:ab:96:82:68:c7:cf:37:da:0d:0b:51:7d:70:
49:e9:b6:1a:77:ac:c8:a6:be:e3:02:73:53:7e:3b:54:5e:f6:
a0:9c:d2:69:d3:0b:53:6b:8e:8d:5c:76:10:ff:ce:72:a2:f9:
11:07:86:52:e6:ec:a3:29:96:a9:55:40:96:ac:90:0c:50:39:
d2:83:28:0c:24:03:8c:a4:8c:f3:32:48:ae:8b:b4:3f:61:4f:
1b:ed:b1:8e:ae:d9:f9:67:fc:89:5a:7e:1b:ac:d6:be:b9:c8:
b0:d9:15:1e:77:b0:52:df:57:b2:82:4c:2c:90:84:f4:46:7c:
27:e8:28:d8:2e:06:03:b0:c4:8b:1b:1a:45:02:7e:b6:14:00:
35:03:07:14:18:22:6a:12:f9:d0:6b:ed:75:3b:63:ad:bd:d9:
71:9c:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:37 2026 by rpki-client