Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer (raw, json)
Hash identifier: ezpNqVyn8kZdBnfWSy690HhFivf+UOc1EvNN33mEZy4=
Subject key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DAA8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 14:00:16 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 103.97.228.0/23
IP: 103.106.202.0/23
IP: 2401:8f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187048 (0x2daa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 14:00:16 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:e2:1a:2a:2d:21:be:8c:e3:89:34:1c:64:
ee:a3:38:a6:71:df:55:6e:27:61:be:dc:98:26:dc:
cc:8f:4d:dc:2e:cd:2e:eb:af:c2:f8:e3:e4:a0:e2:
74:e9:f0:3d:8b:39:f2:a2:db:5e:6b:9a:b2:17:7b:
bf:35:de:3f:79:48:37:f6:b7:60:5b:37:ce:d1:fe:
f1:11:eb:cc:09:73:e2:bb:e6:e4:6f:4e:cb:51:d8:
5c:ec:6b:1e:47:7c:c3:4e:e1:48:0a:ea:eb:2b:96:
4e:f6:54:44:94:c2:0b:5f:2f:54:e8:05:6a:21:c9:
77:43:a2:79:54:ab:90:9b:54:62:6c:aa:ea:ec:85:
b8:18:97:98:55:12:69:aa:69:d7:3b:8e:2a:0d:42:
67:9a:f2:0f:5b:91:57:a4:26:4e:aa:2e:9d:19:30:
42:60:b0:27:b9:48:a3:b0:d4:df:5c:42:38:65:a3:
b1:2a:ad:dd:65:4a:08:d2:f4:b5:8d:58:dc:99:a0:
97:e4:af:b2:e1:df:6a:4a:cb:2f:22:ab:af:35:06:
57:d2:b0:40:26:bd:07:10:09:89:da:0a:5f:4c:a1:
c5:b4:4d:d8:d4:df:d5:46:95:4c:1a:51:01:07:7f:
4b:26:8e:d8:44:f1:e1:50:84:61:c3:20:c3:86:b5:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.228.0/23
103.106.202.0/23
IPv6:
2401:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
d5:4d:5c:7b:32:6a:a1:8c:64:72:77:b3:3d:43:cd:8c:fb:bc:
63:33:b8:b6:fe:c4:37:f5:ff:36:82:99:1b:f6:f5:23:c1:d9:
14:fb:50:b6:e9:c0:8e:c7:52:f0:ae:da:2f:76:7a:bf:60:fc:
1d:af:d4:35:eb:0d:b9:7e:8e:77:58:ae:2a:e0:35:58:8c:94:
bc:7c:74:1d:0f:21:5d:59:08:ae:d5:cc:d8:0c:9a:fd:e9:ee:
7b:2b:1c:a5:85:32:e0:a4:ee:0f:5f:1e:9d:b8:11:16:16:5a:
eb:08:ed:c8:b9:71:d9:b3:ac:73:3e:76:e0:e0:67:5d:13:1a:
20:d4:e5:b1:48:5d:5d:82:83:23:23:f6:80:c4:01:27:53:36:
98:e2:4e:38:2f:42:9d:0c:b2:22:67:f8:d4:b3:09:02:fe:8d:
53:f5:fa:35:0f:d6:15:bc:01:33:7d:12:22:42:a8:c1:4b:a3:
de:40:0d:30:a3:40:fd:32:8e:45:ac:db:3d:af:bf:5c:72:0a:
24:3b:0b:38:97:c7:8d:68:25:e9:ad:12:07:3f:f0:ee:83:71:
58:56:c3:a0:25:01:94:66:cc:78:d3:6c:b5:e1:4e:b3:0d:9d:
52:32:d6:9b:ee:50:c0:88:a8:dc:cd:1f:9f:db:9f:c9:dd:2f:
61:28:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:19:44 2026 by rpki-client