Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
File: Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer (raw, json)
Hash identifier: xJHq0ZPTKK8wCwUXo0mv7DrwbFyVYmjQXylFUn62dNU=
Subject key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AA07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Apr 2026 00:27:51 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 203.27.114.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 06:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174599 (0x2aa07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 3 00:27:51 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:ee:2f:16:c0:b2:68:50:a5:31:6a:81:cf:
33:b4:05:7c:3a:23:08:ad:79:00:76:27:8a:ad:f8:
9a:43:0c:01:a9:9d:7e:44:3d:19:a2:5c:61:70:65:
e1:2d:67:18:91:5a:0c:33:cd:8c:35:9e:5b:d1:dd:
80:63:df:2b:30:e4:2b:fc:ea:58:a1:81:18:6d:fa:
0d:6e:8e:1e:45:ca:89:29:97:ab:6e:01:16:0f:e1:
22:0f:f5:f4:17:b7:79:88:b9:0b:f2:df:65:e5:6d:
06:b4:d8:25:4c:37:b2:19:8c:09:86:b4:ae:e5:22:
9e:bf:7a:64:f8:e0:17:b4:a2:32:3c:3f:97:38:53:
50:db:ed:42:10:53:cb:76:de:aa:bf:6e:92:f6:eb:
22:23:9a:50:ee:70:99:be:1d:75:43:30:fb:0d:fb:
8a:4a:14:c0:35:15:f7:e4:64:7b:f6:2d:9a:c4:76:
f8:51:43:e3:9f:54:14:63:dc:25:99:15:70:33:69:
77:be:83:65:69:8a:42:ec:63:03:80:55:79:10:24:
7a:61:12:9e:9c:4d:a7:01:4e:b3:b3:3f:40:71:c0:
92:79:9b:f6:c3:2c:a1:11:c9:b0:ed:5f:e1:22:3f:
92:4a:59:ab:1b:25:03:6a:0e:fe:e7:ef:01:c3:65:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.27.114.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:7b:74:32:5c:a6:b3:2c:bf:4b:77:51:3f:45:8c:0d:dc:3e:
21:fa:3a:26:c1:5b:9b:00:41:a9:ae:b7:f9:f4:dc:14:63:77:
24:04:6d:39:7a:ce:f6:a1:1e:31:64:19:3a:5d:65:05:1b:44:
2e:23:11:39:36:41:6e:a6:35:da:25:6f:2e:9e:80:f1:1b:0b:
fe:15:45:bf:00:c8:48:45:30:13:4f:1d:e6:8c:18:ec:53:7e:
da:8a:93:89:02:2b:c0:5e:68:09:ba:97:69:2d:00:69:70:7b:
39:52:fb:5f:6a:27:1b:a3:96:8d:e7:4b:3c:d3:ac:06:a7:f9:
6d:5b:3d:dc:84:7c:b8:ff:b5:4d:d5:ec:07:d2:c0:bb:e8:6c:
e1:9e:98:4e:f2:36:76:ad:31:44:2c:8e:10:41:bc:42:86:6b:
a9:bb:d8:e0:d1:a9:65:11:e6:df:42:d6:22:31:f8:87:31:6e:
d0:b5:df:dd:fd:2c:d6:15:8a:b0:07:b2:a7:4d:69:99:49:8d:
34:71:87:e5:2b:43:18:be:45:45:35:87:6d:d0:60:96:79:9f:
3d:7a:2e:27:b9:ce:56:de:aa:47:35:fd:21:dd:e5:b6:0f:d4:
6b:59:b2:6e:da:d8:d4:f6:c9:e7:2f:a7:05:a4:8e:77:20:40:
3d:e4:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:32 2026 by rpki-client