Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer
File: CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer (raw, json)
Hash identifier: Ys39kYVGrpaRYW6p3xPQmJyQ5hurK1Kzp6KRSS5z/os=
Subject key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BB34
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jun 2026 14:57:45 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 203.16.243.0/24
IP: 203.21.69.0 -- 203.21.71.255
IP: 203.25.204.0/22
IP: 203.25.226.0/24
IP: 203.28.75.0/24
IP: 203.55.124.0/22
IP: 203.55.130.0/24
IP: 203.56.122.0/24
IP: 203.56.170.0/24
IP: 203.56.177.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178996 (0x2bb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 14:57:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:73:df:b9:84:6e:a1:f3:bb:d3:18:dd:1f:
0c:d0:82:5d:fe:b9:7b:97:ac:8a:e0:f2:74:57:24:
3d:35:5d:ef:59:32:61:62:58:a4:d0:8d:c4:d6:af:
b7:59:be:98:70:55:ab:a4:6c:f9:04:be:1a:a1:7f:
9a:ed:99:14:e2:36:b4:75:a4:5c:04:3d:61:dd:c8:
cd:bb:e4:5a:ed:0d:33:5f:cb:c5:0f:41:87:fd:5d:
07:35:06:62:8a:9d:82:80:f1:94:98:78:6a:ac:37:
f7:98:68:25:b8:7b:de:33:ba:19:23:6a:6c:c1:60:
e6:7f:78:40:19:9c:8b:0d:4b:21:e5:49:d8:a8:36:
20:18:64:4e:3d:de:ed:03:68:a5:de:70:79:61:6f:
80:ce:09:ce:c2:5f:31:10:63:96:15:9a:2f:ba:38:
d1:73:18:9f:64:45:13:81:ca:48:ca:55:4a:f1:1f:
4f:65:82:2d:7a:9c:4c:8d:2c:aa:92:0c:bf:a6:4c:
a2:60:18:b9:80:bd:a4:cf:95:59:64:0f:2e:b3:6f:
e6:7e:88:bd:24:ce:ba:e7:07:36:4f:c8:15:93:23:
5e:de:46:14:32:5c:a1:08:75:22:6a:38:2e:e5:a0:
bc:f7:c4:8c:c9:5e:32:5e:92:c2:09:03:bd:94:fb:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.16.243.0/24
203.21.69.0-203.21.71.255
203.25.204.0/22
203.25.226.0/24
203.28.75.0/24
203.55.124.0/22
203.55.130.0/24
203.56.122.0/24
203.56.170.0/24
203.56.177.0/24
Signature Algorithm: sha256WithRSAEncryption
43:38:89:86:58:1a:3a:94:8d:72:ad:84:fe:24:91:76:ec:8d:
11:ec:b2:84:98:9f:61:49:08:7a:44:af:31:6e:2b:aa:da:39:
7d:cb:3d:99:fd:1d:17:7a:3c:07:e2:cb:8a:d4:1b:61:96:97:
4c:49:3c:9c:af:a0:09:fd:da:87:ba:71:8d:83:85:8c:73:cb:
d8:7e:41:0d:35:50:d1:30:eb:da:b9:9e:65:5a:94:f2:e3:53:
17:76:31:03:5c:96:fe:1f:a3:86:ec:77:fa:69:46:b0:bb:6c:
6a:64:90:e8:5b:81:fb:46:6e:88:8c:cc:f3:06:d3:04:5b:97:
6f:ff:55:89:3e:1f:db:ed:e9:4f:99:95:cc:f4:c5:af:2e:c5:
0e:09:f6:5f:41:bb:f9:bc:28:6f:ad:13:2c:67:c0:68:d0:d2:
27:57:fb:cc:af:45:43:c4:10:b4:31:d3:54:d0:ec:f7:61:4c:
11:95:ad:49:0d:9b:bc:7f:49:93:3a:01:ef:ad:c7:e6:2f:90:
b4:d2:c9:2f:d8:8a:e6:2c:76:bc:e5:72:c0:94:f2:79:8d:52:
0c:02:81:bf:44:a2:a4:23:8d:8e:17:63:93:dd:2a:ef:b8:40:
22:56:3f:16:79:3e:fa:21:c0:c6:d0:0d:d6:f8:cf:94:93:4a:
83:41:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 17:14:29 2026 by rpki-client