Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.cer (raw, json)
Hash identifier: BwIqh4K7LyZuNCoS6SDtiHcbSNVcgzLBJn3n0Xe4mC4=
Subject key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Mar 2026 19:37:54 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.207.68.0/22
IP: 210.16.120.0/22
IP: 2404:2a80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 13:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173998 (0x2a7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 30 19:37:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:b5:8d:7f:b8:0e:21:3f:a3:64:b9:92:65:
b8:a7:62:7d:89:98:e7:dc:3c:e7:68:ec:5f:cb:f0:
1c:44:6e:1b:eb:75:33:47:2f:1d:72:f8:d8:ff:24:
6f:2d:fa:cb:dc:70:e1:d8:ba:00:99:03:56:ce:4e:
7c:da:80:95:88:77:8a:a4:e3:d6:e8:49:d0:6e:72:
18:38:3c:0d:c6:cd:b8:e4:bd:38:9e:22:a7:e2:ed:
5a:d5:0d:63:01:18:d8:d6:11:b6:a3:ff:87:12:58:
c1:7a:37:9d:5b:f0:19:30:77:b3:4f:33:ff:d6:7a:
af:69:2b:9c:c2:f7:a8:0e:7f:6a:80:2f:68:12:e5:
ae:a6:49:79:e4:41:a2:ae:83:ed:e3:27:d8:8d:67:
b8:09:ef:12:19:ae:bb:6d:97:fa:4c:fe:31:5a:89:
a2:b3:03:f0:33:a4:4e:49:74:7f:d6:0b:91:ec:3d:
12:51:85:e7:9a:c8:bf:7e:4d:5e:13:4c:b6:07:19:
ff:84:99:08:64:ca:78:98:50:c3:74:8b:46:3b:ad:
59:a0:dc:32:50:6e:04:71:cf:e6:ce:56:4d:da:34:
b4:0d:d2:65:f4:36:fe:6a:8f:11:95:99:aa:9c:70:
0a:70:02:d7:8d:54:52:4f:fb:fb:19:32:37:e5:b1:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.68.0/22
210.16.120.0/22
IPv6:
2404:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:ef:86:98:64:11:12:1d:26:07:22:cd:b8:2c:db:28:1c:7e:
b8:46:63:ec:4d:eb:88:69:72:36:c0:25:7c:3d:10:52:be:f6:
b0:28:8e:d5:f1:e7:a0:6d:fa:9a:aa:3d:7e:c8:fe:61:30:c7:
3f:ac:16:12:52:cc:30:ab:66:c1:74:b4:bf:80:eb:91:a8:41:
3d:84:dc:00:d2:e9:4f:6d:35:59:87:1c:6c:5a:d2:a0:83:8a:
0e:e0:b6:0b:76:f7:d8:1f:1c:9b:29:25:28:ae:0f:e3:ba:e8:
72:89:dc:c2:cf:1b:af:8f:e3:d1:7a:35:f8:81:3a:a3:b4:82:
36:b6:06:36:24:0b:4b:63:21:4a:66:a9:db:1b:fe:73:50:b8:
e7:90:93:3d:a2:26:f7:d5:4e:0c:06:2f:01:8b:e8:bc:14:c0:
5d:af:4c:94:36:3a:9c:51:bd:8d:65:60:39:fd:80:ea:8a:1c:
63:42:dc:6a:32:a0:95:83:86:31:aa:96:53:51:c5:87:03:ef:
a0:c1:c8:c5:20:24:64:3b:7e:ee:89:0b:d6:21:cb:27:a0:ca:
6f:47:0a:24:7f:40:14:9f:57:eb:8e:fe:78:04:0c:1d:24:ed:
b0:80:6b:fc:b0:33:97:aa:c2:03:6b:5e:37:31:7e:e3:5b:09:
10:cf:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 16:44:53 2026 by rpki-client