Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.cer (raw, json)
Hash identifier: MkKvCazrSsz6bbYbQAdJpfrv1LJ3uhMNRD1QLBUxaBc=
Subject key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CB31
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 06:17:22 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 203.5.212.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183089 (0x2cb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 06:17:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:15:d0:d7:f4:05:d6:99:b6:13:0d:1f:09:
a0:ca:d6:88:ce:2c:8c:9d:26:bb:a2:cf:bc:71:f8:
0d:80:d2:ec:ac:dd:54:36:88:36:54:fb:9d:ef:18:
48:48:e6:01:16:7d:f8:58:a7:a0:0e:5c:14:cf:56:
cf:99:fe:22:c1:9e:19:e5:fb:1e:4b:b5:0c:7d:51:
5a:8e:81:e1:f7:fc:8b:d2:a4:69:03:30:86:84:0c:
3d:cd:ac:b2:6a:00:9f:75:4b:9d:3a:1c:bf:c4:27:
69:70:42:48:c2:8b:4a:d6:6f:ea:55:8f:d6:52:af:
9f:aa:87:9f:8a:d9:94:60:04:9a:80:0e:1a:fb:61:
6d:02:fe:1c:2f:62:c7:8b:7f:e9:80:67:bb:5e:90:
f5:88:6f:78:48:a3:35:c4:83:d8:2e:94:41:e6:99:
cd:b7:a6:51:c3:e7:3b:74:e0:00:aa:39:2e:4f:3d:
78:80:58:84:db:c8:25:21:a9:56:07:71:51:0e:e0:
e1:bc:54:f7:ea:60:e2:4d:5a:43:26:e5:0a:3e:04:
a1:02:3f:b6:ca:ba:42:72:23:6c:5e:ea:ca:a6:41:
8e:2e:e3:be:56:b6:6a:83:ed:1c:3a:97:6e:43:7f:
ee:e9:4c:68:b7:fa:4b:f2:65:93:3a:23:a3:31:ec:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7b:54:bc:d8:f5:ba:e5:a0:35:7b:2c:f3:0b:df:38:de:5f:
c3:90:b3:da:05:d3:74:52:7e:95:26:26:56:8c:13:c0:0b:47:
93:5a:64:8a:73:5c:fd:5f:c6:29:38:91:26:0c:dd:4f:8b:58:
8c:f7:ed:12:cd:54:ec:58:ae:c6:eb:3f:d2:cf:ed:96:e9:ac:
f6:38:d6:8a:9c:f8:cb:37:41:1b:f0:b9:89:cc:a2:c3:11:54:
0f:67:35:46:d3:8b:5f:c2:cd:2b:89:4d:f5:6b:3e:a1:5e:0a:
ec:93:5a:93:78:aa:29:2a:f8:49:5e:cb:7b:a7:8c:55:87:0e:
60:3a:b1:9a:11:3d:6c:0e:8a:26:58:d7:2d:bd:8d:87:8c:2c:
18:7c:51:93:01:90:17:07:cc:58:c9:64:44:01:c8:9d:36:b8:
01:c2:2c:09:50:d8:de:8c:6d:2c:63:60:1b:f1:e6:e3:eb:fb:
9c:d6:66:9d:26:30:f5:6d:89:45:fc:2f:4e:5d:cd:66:59:78:
a4:b9:72:5c:ee:46:8e:6b:ec:b5:74:2a:5b:86:95:6f:ff:4f:
f2:1f:65:6b:0f:7e:6e:32:39:ff:72:b6:13:40:1d:c7:07:bb:
f7:65:6e:66:84:0f:59:3e:71:c7:05:d4:fc:41:64:0b:05:c4:
06:c5:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:21 2026 by rpki-client