Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
File: XGzjhzN4hpifs8PU5hhqNwtyjVA.cer (raw, json)
Hash identifier: CR84T+w3Roest5aaMoNcGG42GKdP04REXGdkOpJhrzw=
Subject key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C53F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/63/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Wed 15 Jul 2026 14:42:01 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 103.169.92.0/23
IP: 2407:9e40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 19:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181567 (0x2c53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 15 14:42:01 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:4d:ab:06:20:53:a9:73:8c:21:6a:1b:cd:
18:e8:f7:0f:4c:2a:49:03:6e:fe:91:9b:8f:58:55:
33:5a:34:4c:b0:f0:87:8a:86:46:d0:7d:e1:7c:71:
5a:2f:b6:27:b6:7c:db:3b:19:d7:3b:42:85:6e:8b:
bb:64:1b:63:c4:51:f9:db:db:dc:07:fd:7e:d4:e5:
de:f3:2b:52:44:68:08:ae:1e:7d:53:84:d7:65:20:
23:be:de:8c:c0:b7:dd:1e:ba:c1:17:98:92:7d:4f:
97:fb:0b:b9:10:a7:1d:f9:41:99:33:58:4c:98:6b:
a1:b8:a3:04:3b:47:59:fc:48:5a:83:0e:93:0a:fe:
5d:7b:28:d6:1a:0f:fa:c5:9e:1d:84:e7:24:2b:78:
86:68:c0:54:bd:20:a9:57:b6:9a:7a:19:c6:90:9e:
0b:01:c5:60:92:3b:2e:cd:8f:f3:9b:1d:f0:58:eb:
a6:f1:95:b5:e6:ac:6d:be:58:04:f5:60:bc:93:cf:
b9:c1:1e:15:43:15:47:cc:df:e9:2a:32:94:e3:52:
0a:84:2c:c1:ea:11:36:fc:4e:c4:d9:e7:f2:be:31:
7b:8d:48:21:45:c3:91:17:e7:e2:59:a0:cc:23:47:
79:93:dd:40:51:8d:90:67:68:b8:31:c9:bc:ea:2f:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/63/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.92.0/23
IPv6:
2407:9e40::/32
Signature Algorithm: sha256WithRSAEncryption
6b:78:d2:b6:b5:f9:2b:66:ca:f1:cb:57:d5:57:a2:52:03:c7:
7b:9b:7e:00:57:35:f4:65:ae:85:00:08:e6:85:24:53:14:6b:
4a:7c:a3:05:e4:13:a2:3b:9b:b0:6c:3a:a0:86:7d:12:74:ec:
22:80:df:27:bb:31:94:65:23:87:ce:ab:63:81:a1:f6:02:de:
ac:73:1f:bc:9c:f3:d3:37:bb:a7:1f:ef:73:1c:82:b1:ff:d1:
4b:d3:e6:8d:8b:dc:33:8f:5b:53:a2:9a:b8:91:da:4c:db:d2:
8f:f0:58:b2:11:cf:bb:95:94:13:b3:ab:59:75:03:b4:c0:34:
1c:0c:01:67:49:23:22:31:1b:42:a0:31:6e:5f:59:3d:5c:a4:
93:cf:46:4e:53:04:7a:19:77:9b:33:0f:fe:20:d2:9d:6a:40:
b3:48:f7:ba:b8:01:34:35:24:1d:1f:37:55:55:ea:b9:8a:87:
de:27:09:93:0b:de:e1:ca:f6:4d:f2:81:6b:55:9c:8a:a2:4c:
79:c7:18:b2:87:2a:51:5e:66:2d:7f:48:b9:2b:e3:4a:76:95:
c7:01:7d:df:6e:97:95:2c:b0:c4:ed:29:e7:84:a8:21:7d:d5:
c5:ae:10:39:5a:38:bc:0f:32:96:c4:13:20:b2:75:a9:4d:1e:
5d:6b:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:09 2026 by rpki-client