Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
File: KTvwacT02DHu52nVsTnjAh2zSwA.cer (raw, json)
Hash identifier: 4on8SeS+g/1bfDOirPLZOt/CVW7ugH94E/g28R6u28c=
Subject key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C2B1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jul 2026 14:33:05 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 203.8.2.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 18:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180913 (0x2c2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 14:33:05 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:16:02:b5:f0:4d:18:ac:7e:24:00:45:2f:
40:8e:60:eb:5c:6c:de:40:4e:4e:26:d1:6d:79:27:
5a:c8:bc:70:9a:b8:f6:ca:35:83:3b:f5:1d:78:d8:
18:1b:14:7b:4e:95:71:1c:31:c2:7d:e5:2c:99:e4:
b9:c7:5e:9f:21:ac:45:de:f4:e9:44:7d:1e:75:39:
5f:b4:60:34:90:c5:98:95:f5:d5:5a:1f:04:ea:a8:
d7:31:55:d8:48:fb:7b:e1:18:e2:e0:81:b7:8a:17:
be:c5:20:37:45:2a:3d:33:e6:90:d0:af:ca:68:6d:
e5:75:5e:11:34:8b:17:e6:17:49:a1:7b:b2:11:28:
35:5e:ba:f4:ec:c6:43:93:d2:2f:c3:22:c9:2e:94:
67:8e:74:0f:9b:a8:55:e4:ec:54:7c:ac:8a:4b:27:
c9:e5:bc:7d:4b:39:2d:2b:ce:5e:08:f3:3f:35:e7:
34:49:69:3a:e4:1e:a9:b1:be:50:e9:67:2f:b5:f3:
17:11:a9:6d:c7:a9:f1:64:98:3d:9f:1a:f0:39:08:
ae:e8:f2:9b:19:01:db:2c:09:87:11:96:30:2a:72:
c2:40:ff:3d:03:af:3f:7d:1e:68:0d:04:7c:53:7e:
37:81:56:13:ba:bc:28:85:e1:a4:45:85:12:49:56:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.8.2.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1d:54:c0:d4:44:3e:3a:ab:b3:cb:3d:2c:3c:01:6b:14:7a:
ff:ed:64:d4:17:24:63:91:69:ad:b1:6c:b7:46:88:1a:66:e7:
4d:b0:a3:b0:d7:01:c9:f4:c4:4a:6c:42:e7:44:bf:65:2a:e1:
15:4d:69:d4:37:e4:1d:e0:33:ad:05:7d:49:cb:99:ee:33:29:
db:e8:ff:f9:d2:7b:19:f4:81:c1:b3:2f:80:a0:73:47:16:15:
d9:da:2a:1f:7a:c4:cb:34:d7:d8:7c:1d:71:50:84:8a:6b:ff:
11:d2:9c:d5:a9:db:60:65:2a:09:8f:40:11:bb:a5:aa:93:db:
22:f6:c1:0f:0d:83:72:e2:53:03:17:9f:cd:5f:70:94:12:de:
67:dc:ae:09:f4:8e:7a:57:f9:76:13:b9:9c:da:12:89:3c:4d:
db:c3:f3:b4:5a:ca:51:d1:13:93:2c:4c:d2:74:a8:f6:3b:3d:
44:4e:01:3d:ca:8b:8f:68:84:b6:a3:c6:99:4d:5e:9d:1b:50:
b2:21:36:bf:ba:1b:ed:27:53:a7:39:31:66:76:fb:3b:c0:bc:
a1:68:40:51:22:77:d2:8d:ab:d7:85:bf:a3:ed:17:1e:8d:ec:
96:f3:5c:fb:6d:be:a3:b1:a8:00:71:c2:35:76:36:12:fd:fc:
82:a4:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:46 2026 by rpki-client