Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer
File: XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer (raw, json)
Hash identifier: Cx/phibPMQu8qR2tO0UxlQOhKrojV3TaTp9oh9jh8qg=
Subject key identifier: 5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CCBA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Aug 2026 01:36:13 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 139465
IP: 203.8.22.0/24
IP: 203.32.65.0/24
IP: 2001:df1:a80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183482 (0x2ccba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 12 01:36:13 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A918D584, serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:2e:12:04:55:71:11:f4:f7:0c:01:e5:9a:
33:88:11:25:37:7a:bb:83:d3:13:16:16:ed:5c:4f:
97:c9:78:e7:96:7f:f0:2b:1f:79:19:72:18:70:01:
76:46:43:51:cc:2a:0a:7c:8a:90:94:4c:e8:44:d5:
24:2e:89:3d:e8:07:d0:70:83:72:23:17:72:fd:cf:
78:f9:f4:ec:24:5e:c3:67:9a:d5:52:9f:fe:7d:37:
21:ac:28:ad:da:f3:0c:57:4b:8b:b1:26:2d:91:a3:
24:53:af:c1:42:af:f2:69:c9:fb:b3:5d:53:f6:0e:
c3:b8:98:d9:7c:c6:ea:1a:0e:fc:bd:68:b4:5b:4d:
f1:75:03:88:83:9a:50:4f:4b:e5:18:01:4d:e4:a8:
d8:9c:58:82:b1:05:27:b1:95:1b:c3:88:17:c1:35:
78:d0:ff:af:cd:93:96:56:ae:2f:1e:f3:37:ed:0c:
57:c1:e2:f9:11:ed:44:94:2d:12:19:4b:58:58:c7:
76:10:f6:17:4b:75:d1:b2:7b:3f:eb:24:2b:47:7b:
b9:f9:ec:69:0d:b8:64:4e:bb:2c:6e:72:6d:f6:b4:
02:5a:19:3f:cb:2f:1f:da:35:55:74:73:4d:ce:1d:
9e:fb:94:92:f7:d3:97:35:44:0b:19:1f:ab:04:92:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139465
sbgp-ipAddrBlock: critical
IPv4:
203.8.22.0/24
203.32.65.0/24
IPv6:
2001:df1:a80::/48
Signature Algorithm: sha256WithRSAEncryption
c7:84:8b:68:63:26:e2:0a:d8:95:c9:09:b4:c4:bd:81:65:93:
3e:ee:dc:4e:bd:65:43:42:71:26:d2:52:07:b5:2e:a4:30:0e:
0b:df:96:9d:25:8a:91:93:cc:bd:b0:e0:9c:1b:00:82:a4:37:
a7:86:2c:db:be:2b:4f:e0:4f:64:29:e5:1c:af:b3:df:cb:5a:
06:78:01:33:ff:cc:0b:b5:88:f6:19:1d:c3:6a:a1:01:fd:cf:
77:ed:59:df:78:7a:91:47:67:1b:75:25:6b:3d:5a:45:4b:8b:
f3:67:fb:28:8d:b9:a4:bc:ac:6b:f8:ba:68:d8:48:23:6d:49:
fe:04:3d:80:33:58:e0:48:12:de:28:ff:05:24:2e:43:e7:2c:
d6:20:10:8f:b9:67:fd:7d:7e:0f:21:56:12:10:8c:88:f9:85:
1b:28:ac:e6:d0:8a:e7:60:6f:2f:a0:47:84:6e:8b:d6:c9:1b:
e1:37:11:a2:91:1e:a9:db:b9:9d:0c:f6:27:c7:22:2a:df:62:
94:af:8f:ce:0e:a4:95:95:23:e1:9d:6a:e3:e1:c8:3c:52:ef:
87:bb:ce:a3:0c:e2:e0:f8:6d:1a:b5:02:23:fe:0c:63:70:ff:
35:3e:00:86:0b:23:52:3c:95:dc:46:ad:2b:c8:30:bd:b7:44:
1d:0e:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:08 2026 by rpki-client