Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer (raw, json)
Hash identifier: vNHdAymzeGNEb/9Bdr3l9Z2LnR46y704rbw3qfE+X6M=
Subject key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B593
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 May 2026 12:43:21 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 10226
AS: 24566
IP: 43.252.244.0/22
IP: 101.78.8.0/21
IP: 103.13.88.0/22
IP: 114.129.24.0/21
IP: 202.62.96.0/20
IP: 2404:2e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177555 (0x2b593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 19 12:43:21 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:8e:8d:b8:f5:5a:3e:d8:08:e2:d5:5d:f4:
2d:77:88:2c:4e:9a:20:24:ec:12:aa:e6:78:c7:13:
ae:16:a7:19:d8:ea:c1:c1:4e:2d:92:62:96:a9:2f:
9b:0f:a5:28:24:ab:83:86:ef:a5:72:e8:50:38:5b:
46:91:c5:4d:05:f2:2b:6e:32:c0:d2:14:29:61:aa:
64:85:1f:66:93:b8:2c:a0:d0:d6:48:e0:97:1c:0d:
03:3d:dc:22:d6:a5:8c:6e:83:4a:28:41:ea:51:14:
4d:e0:5c:7e:23:29:69:52:b8:45:e6:54:1b:9d:a4:
c0:d1:74:4d:c0:f7:c6:72:16:fe:4b:aa:c5:95:22:
8c:12:8d:a7:93:e2:65:30:58:6b:48:3f:17:8d:9f:
35:08:d7:97:22:9a:5b:99:6d:83:8d:59:e1:92:ef:
7d:c5:47:48:17:b1:bd:0d:3e:78:be:07:43:a8:f1:
a7:cc:28:27:1c:9d:b2:0f:f8:00:cd:c5:d2:cc:06:
00:3f:53:dc:fb:af:69:8f:ad:d2:74:2e:ea:f2:30:
30:e3:86:b3:af:54:23:20:56:8f:b3:62:f5:be:d6:
3f:b6:fe:86:8a:b2:af:f5:b0:6a:d6:b5:84:8c:bd:
36:07:ec:e8:98:79:16:84:62:7b:71:2c:8e:83:df:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10226
24566
sbgp-ipAddrBlock: critical
IPv4:
43.252.244.0/22
101.78.8.0/21
103.13.88.0/22
114.129.24.0/21
202.62.96.0/20
IPv6:
2404:2e00::/32
Signature Algorithm: sha256WithRSAEncryption
29:f4:c5:33:bc:ad:ee:81:ef:4b:d8:72:d8:5e:f0:b7:8e:ff:
eb:cf:18:2d:93:df:2d:91:e5:62:e3:85:d9:6d:2a:65:cd:85:
6e:b8:63:fa:f6:57:2d:37:11:37:21:f7:00:90:9e:dd:91:47:
2f:dc:62:45:f6:8f:23:64:65:27:c3:7c:41:29:6e:49:9a:1d:
a1:c8:83:c3:a6:72:7e:41:58:2d:03:b6:fc:b7:b1:e3:46:e2:
dc:9b:57:33:33:0e:bb:1c:c7:30:35:00:57:fb:4c:7c:75:13:
34:17:4f:c1:b8:79:c8:e0:35:1b:f6:50:12:03:0e:96:ba:0b:
3b:ab:97:b5:b1:49:27:c1:fb:66:85:fd:c1:fb:ce:60:a7:34:
25:74:a0:ce:39:e0:a8:29:b1:2e:69:2a:37:f1:41:7c:1b:72:
6f:fc:50:2a:e6:ef:86:ae:66:8b:bd:a0:41:43:df:da:ce:8b:
2d:9a:7c:41:2f:bb:bc:9d:73:f0:85:1f:0f:70:71:44:a7:bc:
69:86:ed:24:a2:32:20:63:be:79:25:0b:7a:14:19:4d:dd:e8:
4b:a7:6a:a8:1d:47:79:83:8b:17:d7:86:cc:e4:46:34:ae:8c:
a8:d4:f4:cd:10:be:17:66:75:85:dc:71:62:2e:b4:2d:19:db:
82:07:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:43:42 2026 by rpki-client