Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
File: BmIVgepjVqm4tbC9s26io0KBciU.cer (raw, json)
Hash identifier: rGUx3p25R9VdCP0TCgbK/52HQF1YJph0g+bU33p4BuA=
Subject key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A225
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 22:03:53 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 203.2.217.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172581 (0x2a225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 22:03:53 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:ec:7c:3d:fb:c2:3c:3c:53:95:e2:8b:63:
07:08:ff:b9:21:85:23:5c:db:91:7c:6b:9d:e8:0f:
34:a7:63:5c:9d:32:68:5a:a7:f6:f5:cc:37:23:68:
bf:a1:db:bc:09:87:d1:68:83:f5:af:e2:1e:cf:e3:
ca:d4:b1:37:50:fb:ba:60:03:d6:8e:9c:c4:88:3f:
3c:66:4d:bb:b1:bb:31:22:65:23:fc:5d:d2:62:61:
1c:50:34:5b:7a:14:f8:07:22:94:a5:1f:af:a4:10:
12:8e:11:00:dd:89:a7:2b:96:ff:40:a1:87:e4:2c:
89:3e:e1:02:26:86:3b:91:85:6c:bf:2b:b7:4c:07:
59:ef:a7:d5:f2:b6:bb:3f:8e:75:2d:8c:74:b9:b0:
2b:1f:df:b0:02:7d:dc:91:fa:d3:6c:39:89:00:85:
90:96:13:54:9f:b2:29:2a:0b:5b:6c:95:29:2f:a3:
27:4e:bb:bb:8a:c9:91:5a:00:7e:db:85:27:0e:e2:
63:61:ed:f5:8b:2b:25:b4:a3:ac:53:c2:26:60:f1:
8f:99:fd:9c:5e:2d:37:86:2a:59:a3:98:0f:93:2c:
59:a2:91:3c:0b:2a:b1:5a:cc:64:fe:75:23:9a:a9:
41:d4:50:73:2a:03:c3:f9:c4:52:49:cb:ff:36:83:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.2.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b5:27:89:e3:96:7e:19:ac:38:e1:21:41:4c:74:50:4e:05:
0b:74:a3:17:66:5c:98:82:6e:cc:06:5f:f5:e6:be:75:64:49:
1e:cf:30:03:52:b7:fb:f7:05:5f:66:d8:92:c8:97:e1:ae:0d:
6f:56:58:6a:2b:d7:87:15:07:dc:5c:92:e5:58:f0:7e:0d:80:
9d:d6:44:0c:4a:fb:37:a2:7b:03:70:d7:d1:d1:85:b9:8a:30:
6d:f2:2f:61:46:cf:71:db:51:b0:69:75:b1:1e:bc:a3:03:bf:
69:86:e5:b3:e3:9b:63:5b:8b:87:5d:f6:46:80:d9:57:d9:2e:
8f:65:ee:82:fa:48:b6:11:b7:c3:56:ac:ff:83:e9:8b:b4:50:
1a:47:c3:27:81:b7:22:13:d8:8c:fa:2b:8a:93:48:77:f7:be:
99:ea:18:cd:88:88:c9:ff:68:27:a0:66:dd:96:82:7f:c3:96:
6c:78:5b:87:af:94:73:44:37:ac:0a:b3:4b:e3:d5:25:07:1f:
81:61:ad:e8:2c:f1:88:b4:43:95:ad:a3:08:b2:75:ec:36:72:
8a:5a:73:8c:36:66:9d:54:d0:fe:5e:87:8e:5f:a3:12:f5:f4:
db:b7:9c:81:ce:64:dd:10:4b:bb:a6:cc:76:74:81:b3:85:4c:
d3:32:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:26:17 2026 by rpki-client