Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer
File: 4unXDvDCGSHEDJDGOhWJAzQGHgo.cer (raw, json)
Hash identifier: 0jJrST38p6HV7DFkVSWvHRQzmFXM0/ABvxyXuuuA0aY=
Subject key identifier: E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D9BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 14:14:45 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 2402:7aa0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186814 (0x2d9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 14:14:45 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91D84F7, serialNumber=E2E9D70EF0C21921C40C90C63A15890334061E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:67:f1:d9:80:a7:91:4d:74:2c:8a:72:bc:
99:1d:14:11:97:16:c4:cf:fd:fd:3d:06:5e:d7:56:
fe:02:c3:b6:4d:3e:40:09:42:c0:9f:28:16:56:68:
93:96:fc:31:96:3b:07:b2:da:21:e9:be:6a:eb:a0:
3f:1f:c4:9d:82:47:ba:3d:9a:7a:75:cd:41:61:99:
71:25:48:b8:ba:fd:53:06:db:7e:f6:62:71:4f:ec:
b2:a0:60:01:15:65:43:e4:60:19:b5:46:ef:7a:f0:
0f:c3:81:e7:e9:ad:0e:6b:47:d1:c4:c7:c5:35:d2:
b1:2b:38:8f:aa:3e:cc:dd:fe:2c:84:61:8f:0d:14:
88:c8:6b:50:b3:99:0d:72:ae:92:98:16:f7:5d:2a:
d5:9c:bc:6e:e2:e7:6c:f7:17:ea:83:4b:ee:ca:2e:
06:03:6f:d2:b2:a5:96:65:fd:61:cd:2f:f3:d5:8d:
d7:fd:6d:76:f9:c2:66:c4:6d:98:e7:d9:42:62:22:
ff:bd:67:b4:e4:c6:56:e3:72:a4:2d:4d:50:45:bd:
01:d6:ce:65:a2:b5:ee:86:82:c6:0c:c0:25:f3:9a:
db:36:30:89:4e:ab:95:95:c1:cb:2e:c0:7e:dd:d7:
29:a8:14:95:30:27:3b:04:d1:57:f4:be:1d:69:3a:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7aa0::/32
Signature Algorithm: sha256WithRSAEncryption
02:68:ee:86:5f:c2:19:3f:63:74:b1:f4:fa:82:2a:db:3d:68:
54:46:f7:e3:56:c6:34:77:00:aa:d0:2d:56:71:6e:bc:ca:9c:
3d:a1:00:08:eb:b5:15:ec:e7:7a:2c:7a:89:41:c8:15:58:66:
35:85:5a:5a:71:db:f8:f1:a4:40:f8:0f:7a:5e:7d:1c:fa:97:
36:56:e3:3f:d1:ee:8d:eb:f8:1b:22:79:a8:65:50:64:a2:97:
5a:bd:f8:28:77:74:56:1a:cc:2a:c2:6e:49:86:ba:80:c7:66:
9b:dc:04:3c:a5:c0:0d:7e:65:de:51:e1:59:b0:17:b5:e4:8d:
80:e3:58:bc:98:db:71:93:90:43:5a:95:cc:03:ec:0e:7b:e8:
28:ac:e5:4d:7e:a5:84:31:70:53:64:c0:cc:25:37:4f:3a:82:
94:2b:f6:1c:7d:cf:77:66:57:42:6c:6d:3b:f7:3d:54:ef:69:
40:92:da:dd:ad:89:a6:b5:4d:15:62:f6:af:a4:9b:8c:fb:49:
75:66:07:33:cd:92:4d:2a:3f:62:e8:fc:cd:e4:dc:a3:94:f4:
87:43:4e:5c:69:a1:9c:3a:95:d5:44:dc:c9:0d:a3:76:29:7b:
e0:1e:39:c2:58:9c:0f:99:3d:e1:0d:30:de:b5:58:d6:cf:90:
26:39:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:03 2026 by rpki-client