Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
File: _eDYrIjb_GreZ9__WjrC7yZsXNw.cer (raw, json)
Hash identifier: kTX3rCrkcyzxN5h4TXtPWn+id4Hm5wucViqLDjQ/ZEU=
Subject key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A79B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Mar 2026 14:58:22 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 203.3.100.0/22
IP: 203.27.72.0/24
IP: 203.27.194.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 06:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173979 (0x2a79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 30 14:58:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:1f:99:cf:40:bc:c8:b1:94:1f:05:6f:ff:
b4:0c:b9:36:43:f9:cf:3f:aa:8f:c4:6f:7b:93:ac:
81:a8:8e:46:8c:3a:ba:ee:a0:81:a8:d3:1a:0b:17:
89:b9:be:49:3b:ad:e1:50:f4:85:2d:92:a8:67:7a:
b0:30:48:d8:14:08:ff:5b:ef:c4:70:67:fd:56:c9:
70:13:bc:51:44:12:c0:f3:da:c4:c3:a6:de:f7:b9:
7d:7d:30:04:6e:9a:1e:53:61:b0:d4:7e:5e:bb:ee:
ec:bb:e8:5b:d4:e6:4a:c2:ba:33:a2:a6:42:ab:86:
cf:3c:e4:4d:01:a5:b8:60:81:5f:a3:e6:85:61:fd:
f2:ad:55:68:1e:f9:fd:ce:07:05:2d:ef:16:0a:f0:
af:72:82:56:a1:53:32:38:85:8f:23:df:5f:f1:eb:
d7:c2:b8:30:b3:ad:f6:76:6d:11:d8:51:8d:80:19:
cc:ad:6d:2e:19:c1:71:dd:7f:19:2f:b6:c8:a6:29:
7c:61:62:91:a7:fd:42:59:64:ac:88:d0:7d:d4:7c:
e3:74:ad:85:6f:9e:9c:ea:b2:ff:92:2e:03:83:06:
4b:08:c8:d4:26:49:28:94:50:34:63:2a:5e:d9:04:
16:57:e0:2f:4c:e1:fa:b7:ae:7c:25:ff:1d:0a:75:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.100.0/22
203.27.72.0/24
203.27.194.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:22:34:e7:7b:2e:38:7b:4c:b5:3e:6d:b5:e5:33:14:c0:82:
2e:28:a4:88:57:ef:0c:20:ce:f8:3e:4a:d9:05:1c:12:de:99:
2c:f7:c8:28:7c:77:8d:ec:4a:02:d3:f8:b7:c4:00:84:e6:d2:
0a:ec:93:0f:b8:52:7a:5c:d8:c8:97:14:83:ea:ab:11:0c:b8:
91:b1:61:bb:27:b1:e7:ac:7c:aa:ad:f5:54:bb:a9:ce:6a:84:
52:2f:98:a8:71:5f:c1:e5:22:ae:25:51:e8:02:61:dc:fe:4e:
84:dd:f7:ce:5e:f5:85:fa:06:d8:95:c0:6a:36:a3:2f:97:0b:
b1:3c:f8:68:00:04:fd:83:df:d3:2f:1e:21:65:cd:eb:3d:2c:
62:c8:93:61:b2:45:e7:df:ca:a9:eb:d5:55:e1:00:f3:36:d2:
e5:87:8a:22:bd:8f:da:50:2d:c4:6f:65:c9:27:5b:7f:c2:b7:
16:01:7c:61:e7:b0:56:6e:94:8b:5b:aa:4f:f7:f8:29:8c:a0:
7c:25:8c:e2:f9:c4:f2:98:3c:6a:70:97:30:73:b6:74:a0:6a:
07:69:11:86:8c:ce:3d:58:62:00:31:83:b9:c5:8f:a8:59:81:
97:2d:83:89:a6:ef:d7:6e:bc:9f:65:f9:50:86:ac:a4:c5:c1:
5c:1a:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:21 2026 by rpki-client