Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
File: nPapYQAMl2lHu76x0XPCPpCflUQ.cer (raw, json)
Hash identifier: lDlTSyQK91rO0OWGrnyuBHR+XyguFiq0OdYUx1FO0LY=
Subject key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028D66
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Feb 2026 12:39:08 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 203.10.107.0/24
IP: 203.22.83.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 15:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167270 (0x28d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 5 12:39:08 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:5c:6f:32:ef:e7:de:c7:35:c6:3b:b7:65:
e2:f9:da:55:3e:c5:ad:ac:83:c6:b8:3d:5b:6c:4a:
48:e1:33:10:14:3a:e9:79:56:9b:3d:25:f7:7d:f7:
fd:89:72:84:33:78:2e:eb:41:59:5d:8d:b4:8d:d7:
d0:c5:ef:31:16:38:45:c3:76:42:0b:a0:80:7c:54:
6a:6a:e7:93:67:f7:cc:aa:56:6b:75:de:82:a9:cd:
cf:40:c7:c1:4c:8f:18:d6:5b:21:55:20:d4:9b:65:
0a:ac:a5:b8:81:6a:3b:ea:4e:0b:ca:4f:ab:4c:41:
08:af:27:95:d4:b4:2d:77:71:e7:8a:56:de:e2:70:
e4:ab:11:5a:79:51:53:cc:79:ca:ae:ad:90:d7:79:
1f:3a:7d:93:0d:1a:fc:66:8d:3f:60:ce:d5:bb:4a:
b7:a1:3a:9c:e6:e6:a8:d0:ee:bb:33:b9:20:1b:6e:
96:6e:03:26:6d:65:7e:df:94:5b:3f:03:c7:09:68:
f1:8a:cc:f5:d4:3f:e5:ce:c5:91:d5:8a:5d:d0:f9:
76:19:9d:d0:c5:95:47:37:2d:b0:f7:56:61:f0:a0:
03:0e:dc:06:fa:b4:c3:aa:06:1b:3a:3e:c5:17:60:
e5:8f:9d:8d:75:3f:e4:c9:0e:89:23:8d:62:01:9d:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.10.107.0/24
203.22.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8a:9e:c0:03:5e:7c:8b:b3:e4:9f:f3:65:6b:cc:b4:ba:c3:
db:ff:e0:79:25:d3:64:3a:a9:7d:08:f0:21:47:c7:02:b0:65:
35:3d:13:1e:4f:6b:8d:52:df:12:c2:d5:6a:6e:64:34:ad:e2:
44:96:07:b1:7e:4c:24:fe:2c:64:02:da:57:5f:9d:16:64:04:
67:6d:65:3e:b2:00:74:6e:7d:14:90:77:36:7f:70:99:53:ce:
7a:6e:54:f1:16:e8:dc:72:9f:cc:03:f3:42:ce:2f:c8:09:62:
8d:2a:3d:d1:bc:11:5e:59:f0:88:5f:f8:42:22:dd:64:f5:bc:
c1:fb:10:04:18:19:b3:6e:c9:bc:0c:3f:bc:63:f7:83:ee:28:
0c:c3:39:4b:88:29:e3:8a:0f:f5:fe:cb:a1:f6:cc:5f:82:8e:
2e:a7:78:67:5d:2b:93:95:f9:26:cc:ab:5f:bb:f4:2a:cc:60:
d0:4e:05:5e:75:1d:af:ac:91:4d:40:a0:95:8d:d8:d5:5d:ae:
55:3b:4c:60:28:a6:57:b3:3d:40:29:ca:f7:fa:5e:2b:19:5d:
30:f8:11:9a:13:cf:fb:d0:f3:e7:9c:9c:06:64:b2:c9:4a:be:
32:97:30:6f:12:07:56:9d:56:09:35:28:54:2f:b1:20:48:f3:
e2:07:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:25:24 2026 by rpki-client