Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O3lhBfUQkckLRwQth4bfaJmS6jk.cer
File: O3lhBfUQkckLRwQth4bfaJmS6jk.cer (raw, json)
Hash identifier: tp6SPWN6MI4VlEVoIJ75RfYhd6uuGrv4XDkH7hr/9W8=
Subject key identifier: 3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D8CE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Sep 2026 05:36:43 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 203.30.184.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 12:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186574 (0x2d8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 28 05:36:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91E1C3D, serialNumber=3B796105F51091C90B47042D8786DF689992EA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:73:9c:58:91:e7:5f:88:52:b4:99:85:83:
67:e7:90:0f:5c:d8:77:c6:70:d0:a2:f2:16:b1:13:
a0:cf:fe:4a:a7:b8:fd:fd:50:e5:0d:15:c3:ad:09:
67:8a:61:3a:e4:56:cf:1c:a5:76:ae:bf:fb:ca:d5:
51:9c:1b:68:9d:f5:50:6a:8b:f7:4b:bb:66:51:b2:
3b:c0:6b:3a:78:ca:fe:35:70:03:98:81:44:14:64:
63:3d:9b:22:95:d8:4d:c1:ac:8b:bb:62:05:ed:1f:
56:c3:ca:88:0c:3a:8a:69:d2:2b:2c:a9:8d:5e:5a:
20:2e:54:de:0d:0e:eb:53:6b:4f:f4:4e:b2:fc:b6:
60:a6:77:b0:e9:ae:56:4b:de:bc:f2:ed:f0:30:eb:
f6:8f:fe:3e:19:6c:4b:19:c5:8e:82:09:1d:20:48:
30:52:fb:8b:a6:4e:8e:21:08:46:61:8c:11:58:ba:
0f:61:37:2e:ba:21:ce:68:0e:50:3f:f5:ce:9b:32:
c6:19:f1:52:82:0c:0e:12:4f:97:f5:04:f2:a7:cb:
7c:e3:3a:06:8c:bb:35:52:26:3e:63:c6:ad:56:39:
d3:c2:c2:85:f5:60:c6:fc:ae:28:d1:1b:22:9c:c1:
5b:4c:07:8a:a6:e3:42:87:d4:f5:d8:8b:c6:10:7a:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:79:61:05:F5:10:91:C9:0B:47:04:2D:87:86:DF:68:99:92:EA:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1C3D/9479C854BAFE11F1AD29EC975D11F970/O3lhBfUQkckLRwQth4bfaJmS6jk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.30.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:64:f1:ca:e4:c5:7d:cb:d6:d7:6c:e8:a8:15:c2:55:c0:74:
3c:e4:98:8e:4c:3f:f8:a2:ac:70:8a:03:3c:01:60:65:96:05:
a5:9c:9a:2d:4b:8a:75:9f:4d:a3:45:45:80:2c:49:87:26:7a:
a7:28:72:11:96:8a:3d:dc:df:83:e1:4f:f0:eb:72:1b:33:b1:
83:79:96:9c:d7:18:f4:72:95:0a:14:f2:1a:64:4b:7b:76:a2:
c1:5b:13:22:8b:42:d1:d3:1c:75:e9:de:0f:16:b2:b5:37:08:
32:be:69:a7:98:34:87:ad:b8:c2:bb:6c:d5:ee:59:ba:09:e6:
65:8c:73:2b:c5:0f:2f:b9:11:5f:98:9b:e9:25:d0:73:ed:6e:
ad:06:ef:d8:cf:cd:db:b1:16:5c:ec:d6:e9:d4:94:13:34:2d:
b8:dd:9e:bd:25:96:e0:b3:88:19:bc:63:33:b6:15:22:64:a1:
4b:6a:a2:41:64:e7:20:ea:c9:8c:1b:92:19:5c:2c:08:92:e4:
f6:bf:3d:49:ed:de:14:17:86:43:10:23:d5:5c:96:4e:51:16:
89:6a:b9:fb:bf:59:e9:af:cc:4a:32:4c:c4:17:9a:d4:4c:75:
f2:63:c4:4c:bf:54:52:d0:d0:75:7b:61:ae:07:68:84:50:ae:
f9:44:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:17 2026 by rpki-client