Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.cer (raw, json)
Hash identifier: Jcr2C3t4gGAvfbsD/J/BpjgxKZtY23bZV/XXsHCPNr4=
Subject key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CBCB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Aug 2026 02:41:51 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 18220
AS: 24227
AS: 24230
AS: 45870
AS: 147172
AS: 149861
IP: 202.12.69.0/24
IP: 203.0.68.0/22
IP: 203.5.216.0/23
IP: 203.5.220.0 -- 203.5.243.255
IP: 203.6.0.0/17
IP: 203.10.112.0/21
IP: 203.10.128.0 -- 203.11.63.255
IP: 203.27.103.0/24
IP: 2401:6000::/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 13:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183243 (0x2cbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 7 02:41:51 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:f6:36:07:78:06:34:de:42:8c:34:aa:20:
85:1a:cb:02:67:07:24:d5:3b:7a:db:06:87:c3:da:
c8:5a:12:00:e2:ec:ad:cf:4e:ad:2d:13:d8:13:15:
f7:82:c2:b5:86:ed:31:20:cb:0b:69:0f:03:0d:e4:
bc:28:74:a3:c6:0e:6b:d8:93:fc:c7:25:0d:66:59:
26:52:39:8b:56:3a:89:3c:1b:51:67:c4:55:ad:92:
57:4b:48:56:de:b9:ee:90:03:6a:97:f1:2d:ce:cc:
3c:a5:48:cf:23:3e:e6:5a:e6:66:a0:d4:5d:9c:0a:
50:43:48:9f:2a:84:43:12:f4:96:37:ba:91:87:61:
11:51:d0:62:db:a3:6a:09:11:a3:1b:3c:7d:06:1e:
1d:05:19:4d:07:a8:50:9f:5e:d7:90:32:79:c8:02:
91:7c:c3:b9:7a:93:00:42:5f:87:01:c1:4e:f3:88:
e1:2c:7a:75:54:fc:c0:50:03:a7:ec:74:39:ba:a9:
51:32:a6:3a:15:f7:9f:7a:97:52:ac:bd:27:31:b6:
cc:53:99:a2:3d:a2:f0:b3:fd:59:e0:01:e3:fc:5f:
ce:68:3e:a3:ee:d9:4c:9a:0c:9d:92:f8:aa:d0:a6:
d4:81:86:60:35:0c:9c:2f:e9:b2:e5:af:c0:ad:c5:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18220
24227
24230
45870
147172
149861
sbgp-ipAddrBlock: critical
IPv4:
202.12.69.0/24
203.0.68.0/22
203.5.216.0/23
203.5.220.0-203.5.243.255
203.6.0.0/17
203.10.112.0/21
203.10.128.0-203.11.63.255
203.27.103.0/24
IPv6:
2401:6000::/20
Signature Algorithm: sha256WithRSAEncryption
42:6d:49:e7:36:23:36:b5:01:fa:ba:50:d7:cf:84:1a:45:17:
40:ee:65:6f:e6:a1:65:56:86:a5:ad:0a:d0:a4:d2:89:6b:07:
73:a9:cd:92:e6:ad:66:23:1c:1c:22:9b:26:b1:fb:d9:65:c0:
17:74:8c:53:51:e4:55:91:aa:e6:a5:c9:68:fe:28:ca:ce:e1:
7c:7e:0c:13:60:13:ef:18:be:53:10:7e:87:eb:5b:21:28:54:
4d:c5:a9:cd:bf:4b:5a:de:5e:dd:77:59:1e:93:c0:fd:ff:aa:
7a:fd:93:b1:cb:0d:0a:d7:9e:df:95:64:8b:9b:9e:d4:04:ed:
79:e3:55:fd:76:d9:41:e4:2e:97:bb:f6:d6:fe:7c:40:03:f3:
24:c8:52:da:b7:4d:fe:ae:39:3e:14:57:3d:c7:01:ae:69:3a:
25:20:c2:11:3b:4f:fc:b1:55:84:8d:a5:ef:8e:2e:96:2d:2e:
0c:d7:43:5b:2b:e0:b0:90:6d:e3:89:cb:10:f7:7b:e6:26:73:
d2:7c:f7:be:b8:e8:58:7e:6a:ab:9d:9b:52:db:6a:2f:b2:8d:
81:97:6f:ca:15:47:65:c6:d8:7d:17:f9:45:4e:0b:e9:8c:86:
bc:9c:d2:76:1b:96:7f:e0:33:10:be:28:86:02:64:cd:ec:52:
48:7a:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:04:37 2026 by rpki-client