Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer (raw, json)
Hash identifier: l7Ce4Ln0qFGEJJt4NAq0GZciXSwyz16rZV4QoHcEK10=
Subject key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ADF0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Apr 2026 14:13:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.213.108.0/22
IP: 192.140.144.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175600 (0x2adf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 21 14:13:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:dd:99:60:c0:78:10:d4:f8:5a:2b:5b:e3:
f1:6a:76:b4:32:42:64:2a:05:96:3a:76:68:5e:6f:
e3:73:22:46:c5:9e:45:a5:c9:7f:ad:31:f0:e1:f1:
19:18:af:1a:be:c2:79:2f:0b:8e:15:d8:bc:f5:14:
77:b7:07:0a:67:cf:07:80:99:f0:66:25:f8:81:f3:
32:19:7e:19:73:3e:35:75:63:21:85:9d:c0:5e:b1:
b2:22:26:ee:bd:62:e6:1d:f8:03:7d:46:26:d2:6e:
f0:c8:c9:8d:bb:f4:9d:7a:5d:24:76:91:be:4d:0f:
34:70:e5:93:e0:89:92:e0:46:cc:60:16:d2:92:ad:
e0:8b:4c:5c:8a:eb:7f:2f:7a:d5:6b:ec:30:a1:cb:
e8:d2:f3:3a:c8:0b:c1:e5:7b:f8:a0:11:92:76:03:
be:bd:02:2d:e4:b8:06:52:2b:b6:9f:1f:7d:43:49:
4a:f3:3f:b6:b3:7c:5c:f5:45:a5:6b:c8:14:03:48:
f7:60:84:97:e4:c8:4f:44:25:b2:15:23:3b:0f:d2:
e8:bf:bb:78:8b:36:e1:35:b8:4e:64:ce:9e:fd:87:
70:53:6b:42:66:0e:a7:91:4b:fd:64:26:a8:5a:3c:
af:af:b5:fa:90:89:3b:b8:81:0d:ac:f9:44:ae:73:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.108.0/22
192.140.144.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:88:16:0a:5c:fd:59:07:11:62:9c:3e:d8:8f:45:01:09:76:
18:d3:d2:9d:c8:58:cc:df:ef:6b:a5:c6:83:98:fd:32:77:50:
0e:22:f2:e7:47:a2:ee:55:96:67:0e:f8:0f:31:3e:55:e2:02:
3d:ee:2b:13:85:17:2a:21:4c:33:e0:5d:c4:f0:f8:e6:d3:46:
0a:91:5f:77:d0:61:7b:93:e9:60:7c:5c:15:f2:33:4a:99:6b:
e6:12:fe:cc:b7:c1:5a:17:2b:d5:2b:3e:54:0c:78:03:11:18:
e8:ce:12:66:69:67:fa:2a:cd:df:25:f8:25:fe:71:5f:97:2d:
3b:c2:96:33:90:1b:7e:97:21:be:5c:7e:d8:d2:55:14:6b:2a:
64:48:92:75:bf:04:42:2f:5c:d5:b1:19:6f:38:fd:0e:91:4b:
3e:95:d7:09:52:f2:54:f1:86:43:f3:f0:96:18:40:f3:cb:cc:
df:2f:50:87:1b:d2:c6:87:33:5d:c5:c0:ef:54:35:fe:7b:8c:
c3:01:34:86:cc:72:9f:f8:ed:4f:65:98:3a:bc:17:c4:96:68:
5b:18:9c:41:0e:d2:b0:39:2e:15:fc:82:8d:f5:a4:88:3c:a6:
70:71:b7:d4:0d:0c:fb:1a:f9:2d:e8:d2:91:75:52:d8:66:0e:
94:66:b2:c5
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDAq3wMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMTE0MTMxOFoXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUEx
NkI5OEIwQzIzMzU4RkRCMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMn92ZYMB4ENT4Witb4/FqdrQyQmQqBZY6dmheb+NzIkbFnkWlyX+tMfDh8RkY
rxq+wnkvC44V2Lz1FHe3BwpnzweAmfBmJfiB8zIZfhlzPjV1YyGFncBesbIiJu69
YuYd+AN9RibSbvDIyY279J16XSR2kb5NDzRw5ZPgiZLgRsxgFtKSreCLTFyK638v
etVr7DChy+jS8zrIC8Hle/igEZJ2A769Ai3kuAZSK7afH31DSUrzP7azfFz1RaVr
yBQDSPdghJfkyE9EJbIVIzsP0ui/u3iLNuE1uE5kzp79h3BTa0JmDqeRS/1kJqha
PK+vtfqQiTu4gQ2s+USuc12HAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUSjiNrRPf
acLQ6eoWuYsMIzWP2wMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJFOEY2L0IyNkU1RjJFNDZDQjExRTg4NDJCNEIxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCRThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQ
ZmFjTFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBAJn1WwDBALAjJAwDQYJKoZIhvcNAQELBQADggEBANWIFgpc/VkH
EWKcPtiPRQEJdhjT0p3IWMzf72ulxoOY/TJ3UA4i8udHou5VlmcO+A8xPlXiAj3u
KxOFFyohTDPgXcTw+ObTRgqRX3fQYXuT6WB8XBXyM0qZa+YS/sy3wVoXK9UrPlQM
eAMRGOjOEmZpZ/oqzd8l+CX+cV+XLTvCljOQG36XIb5cftjSVRRrKmRIknW/BEIv
XNWxGW84/Q6RSz6V1wlS8lTxhkPz8JYYQPPLzN8vUIcb0saHM13FwO9UNf57jMMB
NIbMcp/47U9lmDq8F8SWaFsYnEEO0rA5LhX8go31pIg8pnBxt9QNDPsa+S3o0pF1
UthmDpRmssU=
-----END CERTIFICATE-----
Generated at Tue May 5 05:46:03 2026 by rpki-client