Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer (raw, json)
Hash identifier: 5hYyZLvFUQnZE7RH7oQaVlPOunX5tcWDisDBA0vfvgk=
Subject key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A6C6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Mar 2026 12:31:55 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.51.41.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173766 (0x2a6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 27 12:31:55 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:75:ec:db:14:f9:04:f1:a8:80:66:1a:05:
6f:1f:6c:f9:56:e0:b4:25:cc:60:59:bb:c9:cb:2d:
0f:e6:df:b5:05:ed:df:cf:ac:42:dc:c1:1a:3a:51:
f3:3f:b0:ab:1c:2d:60:54:9a:e1:e5:34:9b:dd:72:
95:57:a8:c2:af:85:82:a1:f0:25:4d:f7:b9:24:13:
af:fc:b0:e2:4e:58:cb:04:3a:70:fb:bf:3c:fd:09:
7b:da:89:41:78:97:8e:32:bd:61:23:11:1c:cb:02:
92:53:d9:a6:39:63:03:ca:60:6f:24:ab:ac:16:74:
49:24:fb:e3:7b:fa:56:6b:9d:f8:7c:85:ce:2a:1b:
2c:d1:09:c2:bf:9c:1a:ef:b4:4f:73:d4:8e:3c:15:
71:30:50:63:c2:fd:90:14:a9:ff:36:13:78:2b:86:
56:a0:e3:8a:76:91:10:f9:8c:a0:36:09:04:93:26:
cd:7b:d6:e7:8e:43:8f:07:d0:4e:40:a5:0d:cf:ea:
5e:18:6c:62:73:d9:ce:a6:de:96:52:55:18:1d:59:
1e:d6:2b:54:e4:aa:98:58:fe:c1:f8:76:82:60:be:
fd:da:3c:90:1d:95:33:7a:f6:07:3f:1f:79:f5:58:
db:bc:77:e9:90:34:7e:13:78:25:62:e3:18:30:dd:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.41.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7f:b6:26:64:e0:22:5e:0f:97:cb:aa:12:56:a9:93:5d:b0:
04:cf:90:52:b6:13:a2:cb:ba:58:9a:4d:51:0a:97:46:b0:b1:
22:fb:00:35:bd:f6:a6:09:69:3b:3d:a8:03:2d:6d:63:d2:33:
7c:60:ee:be:31:a6:dd:29:76:ff:1f:5a:b9:ad:d7:77:05:cc:
0d:32:bb:f9:eb:d1:ce:16:15:a6:97:a8:61:37:9d:ab:bf:60:
98:9e:ad:fd:eb:71:3d:b4:7e:fa:f0:ff:24:5e:4d:ac:58:ef:
69:f3:10:04:67:68:05:71:2a:7e:aa:b8:39:6c:dc:2b:cd:71:
3d:b9:b2:5d:8d:7a:39:5b:bc:bf:a4:3b:0b:5c:4e:8d:5f:48:
5d:aa:d5:f7:0f:0d:d2:22:60:5d:8f:82:c5:6f:7f:b5:b1:94:
60:e6:12:ac:ab:fc:78:d8:19:ff:24:5f:2d:ab:b4:0d:6f:81:
87:fa:c9:38:fa:1c:43:39:94:04:5a:f7:dd:aa:b6:7b:76:74:
79:56:2e:c1:ef:7b:e4:55:96:52:2c:05:48:43:57:70:a4:c2:
0b:e3:be:74:06:be:81:fc:ec:88:61:75:56:ca:4e:33:27:fd:
56:58:66:cf:e8:0a:6a:db:cb:af:16:6b:d9:3f:4a:34:ca:e2:
51:78:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:34:48 2026 by rpki-client