Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
File: xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer (raw, json)
Hash identifier: 2fxn68AgunJ6CWnuw/4vm9/iA5aiwTIlWxbftluzajs=
Subject key identifier: C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B32A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 May 2026 13:56:49 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 45.112.128.0/22
IP: 103.205.72.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176938 (0x2b32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 7 13:56:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91582DF, serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:d3:68:f2:31:aa:44:b9:81:7d:d3:4c:b5:
05:ad:33:81:5b:7b:7d:32:c9:10:c5:19:a5:3a:9f:
9b:98:8c:e4:0b:5f:b9:e2:84:af:d6:0b:9d:c7:f3:
47:30:2d:a4:25:fb:40:39:be:dc:5f:7c:d6:ea:83:
d9:7b:97:b6:8b:4e:cf:8d:89:1b:98:65:4f:cd:ae:
cf:e1:3c:ff:87:95:3b:c1:ef:3d:f5:7a:95:77:87:
2e:45:ed:a8:db:88:27:21:cd:27:cd:48:c1:6e:ed:
b2:8f:7c:87:1e:ff:6d:51:27:84:9b:e8:9c:21:fb:
24:5a:94:80:2b:7b:db:e7:76:2f:20:97:ee:2d:0c:
4f:7c:fe:a1:62:f3:4d:ea:a1:64:4d:09:ab:4c:de:
b3:b0:3e:29:af:07:59:a7:b1:50:db:d5:ea:f9:49:
a4:b1:a1:6e:4d:6c:0d:1b:0d:02:a8:4b:86:a2:76:
b2:e7:10:26:7c:0e:54:d0:69:27:80:81:a8:6a:07:
44:68:00:b2:d6:be:5b:ab:20:10:57:fa:05:2b:41:
ff:ba:26:af:da:df:ec:1b:29:ba:36:c0:2e:06:b9:
e9:30:39:b9:a6:f7:a7:bc:12:61:04:2f:f9:bf:6c:
83:78:01:ec:86:24:80:e5:d7:a4:53:7e:0b:4b:83:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.128.0/22
103.205.72.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:bc:1a:85:6c:ac:15:3d:bf:5f:f6:73:f2:c9:5e:f9:86:7b:
91:a1:9c:a2:66:5b:40:e8:ea:77:fc:a0:85:af:06:da:00:58:
6f:1a:67:fc:19:bb:d1:61:c5:ca:b2:17:78:22:80:9c:ad:d2:
39:45:22:c7:20:67:75:af:90:e4:cd:19:be:7d:91:84:84:02:
f0:5e:aa:be:b3:9d:da:80:b6:65:ec:91:bd:22:ac:e0:33:da:
f3:e1:c1:e5:ee:86:da:d5:50:f7:d1:57:57:ef:21:4b:29:5f:
b8:ab:a6:29:e4:97:7e:81:41:da:37:46:52:89:48:5c:ef:be:
58:f8:bf:ec:ee:50:7b:b3:cb:9b:8e:08:16:38:ad:9d:0d:f8:
72:c9:6b:1f:58:d0:fc:41:04:83:06:53:71:57:b2:33:47:1b:
6a:f5:8f:3f:7b:07:c7:84:99:d4:3c:19:53:27:a1:c8:f2:e9:
58:91:1e:54:7e:d7:8c:84:7b:80:24:e1:a0:b2:91:ab:49:69:
80:37:75:b1:ea:d1:06:87:44:54:4d:4c:57:18:9b:f3:2f:ed:
84:d1:5e:e2:82:36:9f:00:8a:da:8b:93:21:2f:4a:49:5f:9a:
c9:ee:d6:50:c3:d1:13:8b:49:29:f5:3a:18:7e:c7:e9:51:53:
7f:00:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:36 2026 by rpki-client