Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
File: S0QUrmheSI9CsbZH7qAd67DE86A.cer (raw, json)
Hash identifier: zetQztyI638oPR7ngih7VrXD89m4tg9Rszr0FAg3KrQ=
Subject key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CAFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Aug 2026 14:32:32 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 103.23.68.0/23
IP: 2400:9920::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183034 (0x2cafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 4 14:32:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:62:2d:d4:9e:95:a7:7a:89:77:f3:66:e1:
ed:4c:85:d2:3a:72:95:28:6a:a9:49:c6:34:fd:81:
38:be:e9:a4:45:38:d7:0d:f1:15:80:d7:df:4d:85:
70:5c:d2:76:a8:d3:de:fe:ea:7d:da:aa:10:76:01:
2a:53:8b:62:09:af:aa:de:71:bd:08:e2:64:d0:c3:
11:94:04:70:41:48:cf:ab:53:64:3c:a0:14:9a:4f:
e6:e3:0a:8b:fb:7f:9d:ea:65:61:49:fa:4e:c2:24:
3b:43:43:8c:66:62:e7:ba:ed:13:26:e7:98:35:9b:
82:b0:cf:ca:f1:8a:bc:e0:27:6c:24:c9:96:53:56:
45:a7:22:80:9d:d2:17:d7:60:4e:a0:5d:89:3b:c1:
b2:c9:11:d7:2e:50:44:1e:10:6a:bf:07:0c:32:fb:
02:31:1a:7a:53:fb:a0:69:56:ac:37:74:5f:d0:06:
b2:ec:62:09:26:54:6e:09:3e:4a:a2:e2:8c:8b:68:
e3:82:76:2a:1b:21:c7:11:0b:dc:38:69:c1:9e:53:
66:de:2d:d6:73:db:7c:cb:f2:13:c4:62:03:aa:98:
e8:17:79:a5:34:02:03:3b:a3:32:8c:ae:ad:d5:67:
09:69:52:bb:b4:27:cb:b8:a9:c8:4e:d7:6e:fe:39:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.68.0/23
IPv6:
2400:9920::/32
Signature Algorithm: sha256WithRSAEncryption
c5:8c:5e:c8:29:c1:c5:2f:b6:44:dc:18:8d:4d:cf:d0:62:49:
aa:3b:f8:0f:f3:ac:a2:5a:e5:09:61:87:34:c9:11:d9:ff:cf:
e1:8e:27:54:13:93:17:d2:51:11:69:36:47:81:7a:42:a7:04:
6d:88:3a:2c:dd:83:94:4a:0c:5d:3e:70:d2:de:c9:f1:ce:5b:
1f:50:8c:41:18:d3:25:f1:0c:f2:81:c9:5e:a0:00:80:e0:e8:
88:ea:f2:a3:20:da:1b:d9:e2:d3:5b:b7:f8:71:9d:9d:8b:7a:
97:d8:2c:36:4e:ae:d7:9c:bc:eb:c7:85:99:e4:6f:e0:bf:fa:
42:f1:ce:80:c9:71:06:0b:c2:f6:3f:6e:18:72:8a:cc:f1:26:
3f:21:b4:12:6e:30:d9:e0:29:ac:47:19:74:b2:e9:f4:28:0c:
e8:be:ae:66:94:d1:bd:a0:a2:c3:7f:47:bd:a9:34:ac:ed:b1:
c2:58:53:5e:b3:67:ad:15:03:cb:2f:15:13:b5:f9:cc:01:03:
1c:fe:4d:77:fe:ee:06:5a:c2:99:c7:c8:85:d7:1e:00:15:3f:
8c:4b:80:71:a6:fb:ae:30:24:c2:9c:42:70:50:e9:3e:64:6c:
e2:bf:6d:8b:fb:5e:19:09:28:f0:ba:8e:e9:7b:42:96:51:63:
82:00:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:24 2026 by rpki-client