Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
File: xlWPj8DY0EKe14fq-We-_HoJ3BM.cer (raw, json)
Hash identifier: naOxH5lql8CgP8SpGdEYAvsH4x+8bwujYldHdwfYOh8=
Subject key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A1F4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 12:51:01 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 7475 -- 7476
IP: 103.255.48.0/22
IP: 203.5.112.0/24
IP: 203.15.32.0/19
IP: 203.22.86.0/24
IP: 203.28.18.0/24
IP: 203.100.0.0/19
IP: 203.101.224.0/19
IP: 2407:2e00::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172532 (0x2a1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 12:51:01 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:28:bf:1d:a7:6b:22:ed:2b:1c:45:a1:de:
a7:da:a5:8d:33:7d:b4:99:ce:b9:80:e7:b0:a5:da:
bf:bb:bf:61:21:9a:5b:06:05:21:1c:34:5a:1e:ac:
c6:dc:c9:f8:7d:3d:51:f3:d8:06:48:26:9e:29:d0:
9e:a5:96:2d:e9:94:9e:a2:c1:06:25:0a:05:19:01:
4a:ba:cc:1a:2e:48:0e:9e:44:fb:f1:66:8a:1b:7d:
89:01:ee:40:37:cb:c2:e3:b7:31:b6:9c:eb:cc:a2:
f4:40:0b:ae:a1:46:68:cb:3b:38:75:09:64:5b:87:
2e:74:be:ea:dc:de:c4:dc:3c:0d:12:6e:7c:80:cc:
3e:9e:4a:47:2b:df:6e:d4:4e:55:fd:54:07:62:28:
98:d6:b7:2a:ad:26:3f:ba:0d:93:25:8e:1d:4e:60:
09:94:c3:78:e6:8a:81:b0:79:9b:62:c9:cb:a9:00:
15:37:30:42:2d:dd:0d:98:b1:06:be:0a:8f:ae:9c:
29:e3:e5:95:66:eb:d4:1f:22:16:34:fd:a4:41:d1:
f6:69:1d:f0:e1:4e:78:c5:d4:8c:64:56:78:04:0c:
21:a6:25:7f:97:e9:71:5b:ed:59:cd:ca:51:78:40:
b7:22:d4:9f:78:a4:07:7f:19:48:0b:6f:b1:1d:27:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7475-7476
sbgp-ipAddrBlock: critical
IPv4:
103.255.48.0/22
203.5.112.0/24
203.15.32.0/19
203.22.86.0/24
203.28.18.0/24
203.100.0.0/19
203.101.224.0/19
IPv6:
2407:2e00::/31
Signature Algorithm: sha256WithRSAEncryption
24:4a:de:dd:e7:ce:01:5e:e1:11:f0:ba:b1:43:78:87:81:39:
6b:6e:d0:a2:ae:e8:75:15:49:c6:24:5b:76:fd:3f:f8:09:f8:
7d:ec:12:57:e5:b3:e4:46:4b:68:a4:74:55:73:a9:ba:a5:7f:
cd:d6:6e:a5:9b:a0:ce:e2:8d:90:c4:49:dd:6a:01:18:a7:e6:
fd:3c:2e:ba:ae:89:ec:0a:ba:0d:d8:26:3a:2b:d0:8c:77:55:
93:df:5c:3e:bf:00:ef:a7:19:0d:8e:98:e8:d7:c4:95:2d:3d:
cd:af:8b:c0:9a:1a:36:f5:cc:1f:f9:ed:06:6b:0e:a1:74:1f:
15:dd:d1:f5:22:33:09:86:23:bb:5a:c2:89:35:b2:09:2b:f2:
9a:03:57:59:82:0b:a0:ff:62:2e:e6:9c:eb:7a:fa:f2:a4:8b:
0d:88:ec:46:ac:51:fb:96:f0:77:bf:59:11:41:72:9a:2b:d6:
04:b6:d2:29:55:cd:76:2a:31:8b:01:8f:cf:c3:fa:b0:bc:84:
f1:10:cf:97:9c:55:1d:50:ee:b8:bb:c2:31:8a:36:70:91:58:
6b:23:5e:2d:ad:ad:bb:f0:3d:96:1f:c8:c4:0c:95:97:9f:5a:
18:04:fa:43:2c:3e:a9:0c:93:1f:0b:3a:d2:3a:8e:34:3d:f3:
01:76:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:58 2026 by rpki-client