Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer (raw, json)
Hash identifier: GlhkA6oTLcDcyWH0JQMu+RSw68ZTt84vIgjGqBZmXvk=
Subject key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A499
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Mar 2026 14:33:02 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.107.152.0/22
IP: 2402:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173209 (0x2a499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 16 14:33:02 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:4b:60:4d:12:46:fa:61:a7:57:37:0f:ba:
a0:01:23:26:54:4b:a9:6a:86:ea:b7:58:7c:1e:a6:
ac:7e:a5:fe:a6:ba:29:31:e7:42:9f:d8:0b:b3:2c:
c1:93:96:f9:06:27:b8:42:e1:6b:05:91:ce:bd:b7:
2e:ac:1a:5d:af:6d:6a:76:16:d4:08:fd:f4:51:08:
18:24:04:6a:53:2a:b8:b8:00:07:79:fc:7d:46:84:
e2:3c:16:b9:d1:6a:b1:fa:28:14:14:e4:e0:dd:91:
dc:3b:76:82:f0:4c:27:4c:49:e9:3f:ba:0a:3e:cd:
5f:e8:66:2b:1c:ab:fa:f1:20:56:55:b5:bd:80:50:
9a:da:4a:fd:c9:ae:62:94:a7:71:c4:99:a5:ca:dc:
3f:29:82:d6:31:6f:9b:e5:04:fc:c9:b2:ca:bc:79:
07:c3:c1:46:f4:e6:1a:6a:99:82:ce:39:c4:5d:25:
d5:15:44:84:6e:a2:d7:f9:0f:f6:74:00:06:c6:07:
54:a8:0b:e0:da:e9:46:3f:bb:5a:4a:23:2d:02:82:
7b:df:3f:f6:d6:f1:31:d0:72:bf:fd:24:d0:ad:10:
02:ed:23:25:ac:13:d4:67:44:fc:3f:b0:80:00:7f:
2c:7d:50:df:45:f6:4f:98:c0:36:51:a4:a3:22:6c:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.152.0/22
IPv6:
2402:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
88:e9:6d:13:5f:2f:e1:77:c8:6c:22:46:d1:40:2a:f8:c2:15:
2d:ee:18:04:c9:a0:1e:ae:b2:31:e7:be:5c:a4:5f:e7:9f:c8:
7a:e3:2c:21:5e:29:4f:9c:54:56:a3:97:8c:67:e7:cc:6d:64:
78:ac:ea:e3:08:4f:14:10:b7:5d:ac:2a:9e:f6:49:9c:bf:98:
58:1c:bd:e0:02:db:fc:e8:ae:ab:9f:c4:13:0e:22:70:9b:9a:
1f:77:63:db:50:29:cb:65:1f:42:84:1d:a4:1e:c0:70:b4:a0:
a3:49:a4:33:3f:0a:9c:c7:99:34:ef:ac:fd:bf:13:1e:de:fb:
fc:bd:e3:d2:55:39:7b:59:0f:b8:5c:9f:ca:6d:92:82:4c:59:
eb:94:97:f2:07:67:17:a0:90:d5:67:9a:b8:a3:92:f8:82:f0:
27:04:5c:01:5d:92:23:78:92:40:16:b9:0d:c3:f9:90:ea:ad:
ad:e1:9a:29:fb:ca:84:f9:70:b9:5d:15:3c:41:49:cc:77:66:
d1:e4:ea:f9:e3:a2:6c:57:17:3a:c6:6b:6b:c5:70:94:ed:de:
bd:7f:86:39:ec:2d:a1:49:fe:10:a9:6c:3f:c2:ca:0b:33:d9:
07:64:87:29:13:43:7f:fd:69:03:05:9a:01:14:b1:c2:1f:ec:
46:b2:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:43 2026 by rpki-client