Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
File: DNjeYk5eS0zpjdodRx4ImBlywHs.cer (raw, json)
Hash identifier: 1TrQ8/20q+HhVnTfj4nRxQbDVDzv62jT0g1ZswRa7L0=
Subject key identifier: 0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A721
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 29 Mar 2026 08:18:08 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.17.224.0/22
IP: 2400:8f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173857 (0x2a721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 29 08:18:08 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A912B051, serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:21:12:03:f2:ee:ae:6c:8b:0c:f9:d2:f9:
b6:53:3f:ee:d8:44:29:c1:57:0a:16:84:3b:25:fd:
81:e0:cb:99:1d:0b:d1:38:8c:8f:b5:3b:1b:77:1a:
8d:a3:08:0a:30:08:c1:d1:84:71:4e:ec:ef:22:a3:
8e:78:76:5f:39:d6:3f:e6:04:e1:39:ae:4c:8f:9a:
30:18:96:3f:2d:5e:58:f5:19:20:c0:84:9b:91:90:
80:d7:e9:51:50:3b:3d:cd:6b:b2:bf:0f:a8:d9:dd:
c2:49:82:11:f4:c5:80:bb:63:c4:91:a3:2a:9c:71:
4c:bf:db:65:b5:64:c3:aa:f6:d6:dc:a8:0f:53:62:
c4:78:35:ce:2d:42:d3:3f:97:f1:20:cd:ed:6f:38:
03:9c:bb:f0:8f:b1:a3:0b:15:89:94:a0:b6:d4:52:
9f:41:11:d5:2b:0c:52:71:91:b4:ee:cf:9b:24:10:
c1:34:1e:62:fb:27:99:1b:4e:35:cb:85:07:15:81:
86:7c:98:02:8a:54:e8:7a:01:3f:be:17:57:00:d7:
7d:91:6e:2c:e2:c6:b8:f2:a1:2d:b6:29:02:f3:ba:
12:f6:0c:9f:72:30:b1:3d:f1:62:7d:d2:07:05:ef:
d5:28:d0:cd:62:02:ae:8b:5d:62:ff:72:cb:c5:6b:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.224.0/22
IPv6:
2400:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
76:1a:26:81:4a:45:ed:64:04:94:8a:c5:35:28:9c:77:85:72:
60:01:0e:7b:6a:c2:ec:bd:23:82:85:30:7a:af:4b:cd:45:c5:
f4:60:2d:44:6d:2f:78:06:db:e4:fe:8e:80:a7:b0:2b:62:fa:
c3:9c:68:2a:61:cf:bf:5a:6c:e2:cf:c2:47:05:20:e0:4a:5c:
f6:f5:06:c2:72:56:49:97:fa:84:41:a3:af:6b:c9:f8:76:49:
dc:f0:e5:fb:ba:09:cc:b8:f1:01:11:91:90:e9:dc:1f:53:3d:
09:64:ac:e1:f7:1a:83:ef:a3:4c:44:c1:31:27:46:08:96:22:
91:7b:af:c4:72:54:a8:73:bb:fc:5e:80:15:c0:5f:10:ac:76:
8a:b7:30:42:00:65:f5:1b:f7:c5:7b:fb:15:dc:4e:f5:44:37:
4e:06:16:7a:b6:57:08:05:4d:06:54:d2:1f:84:b6:01:88:50:
be:bc:99:50:df:7a:9b:f8:8f:1b:b7:46:29:89:9b:aa:96:81:
c0:75:ba:23:ba:36:bd:e8:0f:c8:42:38:97:6d:11:e7:9f:f3:
4e:6c:8d:55:18:3b:53:f1:93:3d:7b:9b:89:18:1c:21:6e:8a:
c5:13:12:2d:76:73:a3:84:35:ab:f7:9a:b2:4a:2b:5c:a3:38:
a3:8d:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:04 2026 by rpki-client