Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
File: HXJckcDUci80AIjRN03S2vN9gxI.cer (raw, json)
Hash identifier: QnD1lMN0V3fvCpAKfb33K6Kf5jUUgXCiU3WrYNzUsgQ=
Subject key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DB68
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 22:28:01 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 103.155.110.0/23
IP: 2001:df4:c580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187240 (0x2db68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 22:28:01 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:9d:2a:6a:3e:7b:4f:ad:f8:41:51:fe:85:
db:54:8a:7e:d4:0a:90:c6:eb:50:9b:22:ac:3e:fe:
be:64:34:cf:fd:39:d3:08:d6:63:04:13:24:05:e9:
82:0a:70:f5:52:8b:32:1d:0c:27:7c:b5:9e:f2:7a:
06:51:ee:32:77:cd:38:c3:f7:43:07:e8:25:d7:77:
76:0b:2c:7e:3c:ff:08:24:35:5b:38:9d:cf:81:4a:
3b:03:a5:b9:a6:2c:cb:c7:dd:6e:d5:29:c0:75:5b:
3b:4a:ec:a8:18:0e:43:33:91:7f:2a:85:80:df:8d:
f1:f9:28:68:3d:9c:40:1c:cd:82:7e:e6:ae:61:15:
98:d0:2f:c4:f4:da:44:5c:ec:25:65:14:fe:cf:6a:
a0:6a:05:e7:42:c2:e9:d3:5b:61:25:c9:3f:b5:e5:
b3:17:cd:aa:53:b7:a1:71:fc:ed:85:3b:79:32:82:
8c:c4:7d:09:d5:77:62:3a:ba:c5:9e:5f:fd:10:11:
14:34:a0:f8:d5:89:d4:ea:14:39:0e:d3:68:b1:49:
1a:01:a7:88:a7:43:d4:8f:36:90:f8:64:8b:05:fd:
4d:81:ca:18:16:13:22:d2:8b:40:c5:2f:0d:66:3c:
66:2a:de:26:cf:67:2c:e9:26:1b:5d:e5:f6:20:4e:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.110.0/23
IPv6:
2001:df4:c580::/48
Signature Algorithm: sha256WithRSAEncryption
05:72:5e:25:f8:39:16:77:e5:12:ef:3f:46:aa:57:18:4f:57:
88:56:ca:74:b2:f5:64:30:85:dc:49:1c:43:3c:76:09:ed:cb:
be:6f:ea:8a:1f:28:a8:35:07:f0:50:e9:87:79:d3:75:d0:17:
1c:30:90:4c:81:6b:dc:1b:ea:4f:8e:4e:f5:be:5f:b1:ce:33:
3c:51:b4:ef:62:61:40:de:e2:a6:bf:3d:ce:a6:7b:bc:18:97:
77:f7:2a:e3:aa:0b:7d:ee:90:2a:70:19:00:5b:ef:53:c5:63:
ee:bd:b5:80:61:54:98:ec:8a:25:66:c2:1e:5c:02:a9:a7:48:
62:37:4b:22:14:bd:6b:cc:1b:c8:13:10:b0:71:83:6c:8f:e4:
cb:cb:8d:1f:f3:9f:f1:77:eb:fc:6f:cc:59:b5:47:8c:6e:00:
68:3b:98:f3:f2:69:3c:10:10:f3:22:16:91:3f:d8:e6:f6:50:
bb:e4:b1:1a:49:4e:e9:30:4f:90:c9:6f:0b:4f:9f:fd:18:73:
bf:6e:a5:98:46:8e:73:99:f0:5b:d7:4d:a9:db:b3:41:92:30:
b7:88:c6:7f:70:22:b8:c8:f3:1c:26:93:af:5c:52:47:59:00:
90:4c:b7:fe:e9:7d:4c:60:3d:b7:53:5b:bf:2b:e6:9d:db:5f:
a3:4a:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:32:12 2026 by rpki-client