Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer (raw, json)
Hash identifier: vmwmXGHGhLLLzzjtop/gDNEf57IvOSt5+vKsGqJSZ94=
Subject key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C898
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 05:40:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.213.108.0/22
IP: 192.140.144.0/22
IP: 2402:6a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 17:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182424 (0x2c898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 05:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:dd:99:60:c0:78:10:d4:f8:5a:2b:5b:e3:
f1:6a:76:b4:32:42:64:2a:05:96:3a:76:68:5e:6f:
e3:73:22:46:c5:9e:45:a5:c9:7f:ad:31:f0:e1:f1:
19:18:af:1a:be:c2:79:2f:0b:8e:15:d8:bc:f5:14:
77:b7:07:0a:67:cf:07:80:99:f0:66:25:f8:81:f3:
32:19:7e:19:73:3e:35:75:63:21:85:9d:c0:5e:b1:
b2:22:26:ee:bd:62:e6:1d:f8:03:7d:46:26:d2:6e:
f0:c8:c9:8d:bb:f4:9d:7a:5d:24:76:91:be:4d:0f:
34:70:e5:93:e0:89:92:e0:46:cc:60:16:d2:92:ad:
e0:8b:4c:5c:8a:eb:7f:2f:7a:d5:6b:ec:30:a1:cb:
e8:d2:f3:3a:c8:0b:c1:e5:7b:f8:a0:11:92:76:03:
be:bd:02:2d:e4:b8:06:52:2b:b6:9f:1f:7d:43:49:
4a:f3:3f:b6:b3:7c:5c:f5:45:a5:6b:c8:14:03:48:
f7:60:84:97:e4:c8:4f:44:25:b2:15:23:3b:0f:d2:
e8:bf:bb:78:8b:36:e1:35:b8:4e:64:ce:9e:fd:87:
70:53:6b:42:66:0e:a7:91:4b:fd:64:26:a8:5a:3c:
af:af:b5:fa:90:89:3b:b8:81:0d:ac:f9:44:ae:73:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.108.0/22
192.140.144.0/22
IPv6:
2402:6a60::/32
Signature Algorithm: sha256WithRSAEncryption
b6:89:af:6c:7e:de:30:30:f7:cc:d1:d0:04:c4:3e:c9:f3:54:
d2:3c:13:41:36:07:0c:3d:b1:5e:39:1e:45:5e:ec:42:36:1f:
2a:83:f1:01:fd:a8:50:c9:01:c9:a3:b2:c2:4e:a3:95:08:48:
33:ef:37:17:e4:23:b8:a1:6d:05:96:89:b1:5f:ee:b5:94:3b:
4c:19:c4:87:b9:3d:4f:ff:7c:0c:3a:15:71:b8:61:99:09:b1:
6b:63:e1:cc:cc:87:e8:ca:63:65:c2:d1:7b:83:e1:57:82:30:
53:e7:65:e0:95:ce:06:d4:5f:62:36:0c:52:cb:37:db:84:51:
46:9b:c9:d4:f5:ac:0d:e6:3a:b2:ea:47:af:7b:94:5e:c9:1f:
4d:a2:8a:c0:70:31:54:fa:aa:08:e6:0a:c5:95:86:66:81:54:
69:4c:94:b9:7e:31:09:86:d4:1c:49:0f:7a:05:a5:27:ad:d6:
73:b5:f4:ba:dd:12:6a:46:42:57:ba:d8:f9:00:69:eb:fc:bc:
02:cc:96:d9:89:5e:d2:54:47:0e:ca:19:6b:cd:63:67:be:cd:
b5:38:51:ac:ee:6a:8a:89:da:ec:ab:1b:34:29:a9:00:2f:e1:
3b:43:7a:8d:21:b2:eb:bd:14:61:b4:b7:97:82:13:c5:94:f9:
2b:e7:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:13:04 2026 by rpki-client