Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
File: 8eArOUb---b0ZPQ0jvIVX2HQehs.cer (raw, json)
Hash identifier: oaoJpsSPqHg4DrqaFtHMn5E2We2Ns/E3SldWwFltSlA=
Subject key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D9D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 14:38:04 +0000
Certificate not after: Sat 30 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 59355
IP: 103.230.252.0/22
IP: 2405:2240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186833 (0x2d9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 14:38:04 2026 GMT
Not After : Jan 30 00:00:00 2027 GMT
Subject: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:78:9d:4a:0c:6b:b4:71:2c:9b:f7:85:8f:
65:77:3d:be:de:c7:af:5a:44:c4:51:b0:99:84:ad:
f9:f2:5f:64:00:0c:d6:4c:03:db:f8:13:14:20:67:
97:86:e7:1b:c2:93:02:62:60:1e:81:2d:02:cc:0b:
a2:8f:55:2e:c4:6a:59:b2:96:96:e5:20:7d:db:b8:
ad:f4:91:19:db:67:eb:ca:09:a1:eb:d8:20:b1:75:
4c:12:d2:91:02:aa:26:b2:b2:5b:4b:61:00:67:65:
c4:77:73:f6:a5:0a:b1:2c:c4:00:50:cd:01:61:86:
44:cd:56:8f:9a:f0:bf:b7:61:2c:95:9d:e2:9f:26:
54:5c:dd:40:9e:97:00:8b:89:b8:29:04:5f:3f:4b:
76:12:08:97:87:66:26:5c:ee:69:e0:15:5b:dc:66:
fc:08:c8:c3:1d:fa:c7:fb:89:07:e1:61:84:65:56:
3b:c9:93:8c:0f:bd:b7:00:dc:43:80:a6:83:20:2d:
38:a0:f0:b5:45:37:7c:81:39:62:bf:5b:1e:9d:de:
d6:3a:f7:f7:38:34:95:a8:5e:ff:b2:52:db:bc:cb:
cf:ca:7d:8a:32:63:66:d4:41:93:6d:03:e3:85:f5:
83:69:10:51:ca:9a:02:e8:54:f7:11:d2:eb:59:35:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59355
sbgp-ipAddrBlock: critical
IPv4:
103.230.252.0/22
IPv6:
2405:2240::/32
Signature Algorithm: sha256WithRSAEncryption
03:65:bb:d3:62:7c:a4:c9:f6:c0:22:c5:fc:e1:03:74:d9:4f:
f6:13:2e:c7:34:03:58:ee:33:fb:2c:ad:fa:c9:6e:5c:bf:44:
ec:e7:20:5f:72:44:b2:cf:a7:63:c8:3c:1f:aa:2f:c6:d8:90:
a9:6e:c6:40:b5:53:34:ed:93:52:a2:97:ba:87:c4:42:43:79:
20:60:a9:f5:ed:c8:42:36:d0:7a:d2:6a:de:83:22:bd:c1:76:
76:46:54:18:3d:16:3c:c5:63:1e:5d:6d:ed:e5:86:a7:87:6b:
05:74:9d:61:34:b0:ba:65:17:8e:03:83:0a:7b:8b:23:e3:8b:
75:be:65:c3:e4:aa:45:11:ce:60:d0:28:7a:04:74:61:99:19:
e4:e3:28:0f:f8:0e:0f:b0:5b:44:fc:ab:48:f1:84:a2:7d:85:
c8:1e:72:ff:fc:cd:73:38:4c:07:e2:14:c1:df:01:8a:b5:56:
85:8b:fc:80:59:d9:3d:23:06:0f:7b:04:6b:d3:40:df:d8:ac:
c3:78:a4:6d:de:ec:80:98:e4:1d:8f:6c:ed:9d:3f:e9:54:fc:
8f:b4:f3:be:92:58:a6:79:e1:16:89:3e:27:e7:bc:f4:01:4b:
bc:b3:0f:76:40:55:33:23:a6:86:15:1b:f2:cd:5b:ca:48:94:
05:de:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:23:16 2026 by rpki-client