Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
File: S18cktxo2UEqrDB3GD-jbdA9zRU.cer (raw, json)
Hash identifier: LI+dTIuE/rsEh2k66IQ15JLhMqcBXybPuRx4PdH+P8U=
Subject key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B64D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 May 2026 09:31:47 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 119.10.128.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 09:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177741 (0x2b64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 22 09:31:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:a5:4f:9b:50:5a:bd:26:af:53:5c:01:3b:
88:4a:63:db:bc:32:c2:4e:f4:2f:7f:b8:e5:a1:38:
0d:05:18:92:41:bf:76:81:ca:30:12:26:63:c3:1b:
fb:14:b5:b3:56:0c:e2:f8:0a:4a:b8:07:07:63:17:
b4:44:4b:5a:39:fb:81:5f:92:c3:c0:0e:18:7f:7a:
7e:ec:9c:e7:3c:54:a8:76:de:10:74:e8:e4:6e:2b:
da:b5:2b:de:4f:63:58:6c:6a:62:41:0a:04:ba:97:
75:ad:4a:c6:0a:ec:fb:31:f4:e3:47:f7:bb:98:32:
e0:81:03:a0:11:fc:d5:0c:10:ec:76:dd:3a:a2:e8:
4e:92:a2:b7:3f:8d:48:51:95:9e:c5:10:b8:24:66:
93:34:01:06:b7:2b:d5:ce:78:cb:87:f8:0b:4c:77:
1c:89:3b:ff:76:40:e5:50:ef:c2:79:78:26:dd:97:
55:d5:bb:4b:28:a6:31:9a:90:d0:fe:43:cd:4e:91:
37:43:61:55:7a:e7:6e:94:c3:93:42:75:c4:a1:9e:
8c:89:a7:c2:3d:11:cc:db:c3:f2:43:c7:84:d8:8a:
53:d2:b4:0e:5c:3b:9f:50:58:0b:76:50:b4:11:7a:
7b:d5:3d:fc:53:f2:ae:af:65:a5:10:37:4b:7b:70:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.10.128.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:b0:fd:ef:21:c3:4f:ef:8b:f9:df:7a:7e:59:8c:9a:54:7c:
a2:7c:91:15:da:2f:eb:0a:0e:9a:3d:53:33:d7:54:62:67:67:
a8:d3:08:b8:93:25:a9:30:42:f6:7e:0a:ab:9f:4c:7e:06:c5:
5b:c1:c0:d6:78:38:6b:38:99:96:dd:36:2a:dc:01:ad:68:3d:
9f:6d:4b:0f:4e:de:08:fe:44:38:f0:a4:a1:3b:be:6a:cc:c2:
40:45:70:e5:3f:7a:04:e8:d3:49:6e:9b:c9:66:2f:36:9f:79:
24:ab:4e:b3:89:29:09:26:13:1c:21:a5:c2:7a:52:a7:ae:64:
af:d9:ca:95:47:3c:14:75:8f:ee:49:78:aa:0d:72:00:79:24:
e4:31:66:95:b7:33:10:85:9d:dc:fa:07:bf:65:57:4b:31:e3:
20:e4:0a:05:45:60:29:71:b0:a3:4d:01:64:f6:ae:ae:43:dd:
33:cb:41:5a:e5:b9:a9:01:79:e7:4e:0b:6e:f6:97:6d:87:15:
dd:6d:66:0b:5b:eb:3e:15:0f:60:96:88:bc:0a:92:c9:f9:42:
04:95:06:31:ea:ca:ef:5b:a4:57:cd:06:7c:d2:42:fa:f0:26:
3b:1d:57:9c:f5:62:75:ac:70:08:69:0a:15:3f:99:b9:a0:f5:
fa:a7:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:11:10 2026 by rpki-client