Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
File: iH554lttHTfvHzG8WgIy-OdlFUU.cer (raw, json)
Hash identifier: YqAiyRbbX3jmmfSrKGN1jyOYfhaBBaAV4fnL9CouFFw=
Subject key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028D28
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Feb 2026 14:16:45 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.147.198.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 15:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167208 (0x28d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 4 14:16:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:94:22:d3:07:4f:31:ba:c8:8b:ac:21:d5:
ce:8c:94:74:47:8e:41:ea:6b:e9:bb:05:38:c5:a7:
1c:5f:08:d5:6d:e9:bb:9a:d1:83:5b:94:4b:bf:ad:
8e:c0:76:28:c3:13:d9:cf:3c:4f:25:76:56:51:46:
25:16:bc:50:43:aa:32:29:e6:67:ef:7e:92:67:77:
01:b3:e8:c3:20:fa:e0:8a:41:29:e1:dd:7b:a4:d2:
76:73:ca:52:71:74:4c:6a:99:0f:47:aa:3c:13:a6:
5c:ec:05:fd:44:b1:09:28:58:ec:06:94:72:90:f4:
a1:e1:e9:14:d4:cc:0c:57:63:92:18:df:49:8b:6d:
aa:8e:e1:a5:b3:ce:6d:08:1f:cf:f7:19:b6:d2:7f:
b0:55:b9:cf:d4:8d:f1:95:24:6f:a8:91:32:d0:d8:
9d:bf:a5:36:33:8a:b7:07:46:3b:7e:c3:62:c6:d5:
42:06:aa:a8:3d:4f:bc:62:2b:96:82:f3:3b:8b:30:
90:9b:16:f8:f6:4d:12:72:7a:d0:a3:80:fe:06:0c:
00:40:08:e7:e1:71:83:96:b8:19:04:23:ae:4c:40:
9e:30:88:3d:27:98:cb:ad:e0:63:44:6f:e3:01:f6:
5e:aa:2e:44:a1:d7:70:c5:9c:da:0a:1a:20:db:5c:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.198.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:dd:72:6d:5e:12:c5:89:b5:2c:82:ca:00:6b:9c:22:05:4a:
11:c6:01:ac:b8:00:cd:63:e8:4d:d2:ea:37:6d:6f:96:96:7e:
46:2f:d4:45:4c:3a:af:b8:81:73:27:f5:2b:70:d7:8c:61:3a:
2f:96:ca:37:af:94:68:58:0b:dc:e7:28:dd:a6:13:6f:78:da:
d0:2f:10:d4:44:01:c3:19:5b:7c:16:70:f9:40:56:93:f9:12:
b3:93:60:52:fc:53:c1:89:88:bb:47:43:fd:78:2f:61:67:b5:
80:62:f0:a8:f2:e2:d1:4a:a8:88:7a:a2:e7:a6:47:d6:02:8a:
cd:38:93:be:86:f3:30:c1:49:4c:e2:ea:9e:e4:f1:a4:38:09:
eb:fe:ef:11:d3:32:24:42:67:66:de:28:bd:bd:4b:5f:0b:dc:
33:ac:5f:5a:49:06:cc:ae:2f:db:ab:b8:5d:b6:e0:de:21:6c:
de:01:40:6c:2c:22:b6:d9:c6:1c:9a:25:09:63:b7:6a:d3:05:
76:26:f1:b1:b4:8d:2d:c8:0b:0f:83:4a:57:71:cd:07:f6:fa:
50:de:b3:2c:8d:2a:79:f9:51:84:f0:c0:46:dc:fa:d1:be:d8:
0b:15:1f:c8:3a:f1:76:64:b7:c5:dc:c1:c2:19:94:e1:bb:b9:
8f:17:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:35 2026 by rpki-client