Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcjcK0CPJCw0sCJ02b19uuyhkIQ.cer
File: zcjcK0CPJCw0sCJ02b19uuyhkIQ.cer (raw, json)
Hash identifier: bqnmE9uw8z/ousmnOXn7GeQsBjLifXU5LW4QO6lDE3g=
Subject key identifier: CD:C8:DC:2B:40:8F:24:2C:34:B0:22:74:D9:BD:7D:BA:EC:A1:90:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D963
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/zcjcK0CPJCw0sCJ02b19uuyhkIQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 05:28:59 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 45.127.232.0/22
IP: 103.196.220.0/22
IP: 2403:67c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186723 (0x2d963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 05:28:59 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A919F778, serialNumber=CDC8DC2B408F242C34B02274D9BD7DBAECA19084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:49:dc:02:69:3f:a3:c8:be:f0:82:c4:ea:a7:
97:c3:73:2a:a5:3d:ca:1d:07:4d:93:db:94:89:93:
b1:61:e9:3f:48:15:76:0c:9d:03:5f:fe:98:21:15:
24:79:ad:41:c3:9a:10:85:4a:bb:b7:3e:4c:16:76:
2d:c7:ed:d3:3c:4f:61:f3:12:c6:c7:2d:0b:d8:03:
f6:da:af:cb:d4:b0:a8:b6:52:54:b6:c4:63:85:a9:
54:e2:47:bf:b9:0d:92:e9:2d:c3:6e:47:b8:87:68:
1d:4b:23:9c:fd:01:07:3f:7f:eb:06:62:d9:50:80:
6f:8b:9d:85:3e:e8:08:0e:13:23:92:5e:a0:74:96:
6a:12:50:c3:41:9d:0b:53:3b:5c:cb:fe:07:dc:cb:
18:1b:ea:7f:c7:18:1a:74:63:38:55:b6:c6:27:b9:
5f:08:f2:e0:87:d8:8f:04:8f:7b:44:b4:4f:19:73:
a2:75:da:4b:53:26:46:52:04:cc:f5:11:fa:ad:38:
70:16:62:ca:7d:6b:14:cf:b0:d4:49:ad:be:99:93:
70:2b:40:93:b6:5f:4c:76:9a:fc:9e:33:ed:e7:9b:
6d:87:86:43:b2:97:4a:aa:e2:06:96:e3:d2:59:ad:
24:b2:b2:a5:88:ef:89:88:ee:cd:45:d7:6e:42:37:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:DC:2B:40:8F:24:2C:34:B0:22:74:D9:BD:7D:BA:EC:A1:90:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/zcjcK0CPJCw0sCJ02b19uuyhkIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.232.0/22
103.196.220.0/22
IPv6:
2403:67c0::/32
Signature Algorithm: sha256WithRSAEncryption
25:71:23:87:fe:92:35:ef:c0:09:bc:a5:81:7b:80:3b:51:f7:
6e:3d:01:df:23:ef:c6:73:12:92:9a:7c:a1:6b:6d:b7:26:4c:
c5:53:64:8a:0a:62:f7:c8:33:73:06:d1:6e:fa:93:66:9b:ad:
72:34:5b:59:ea:2a:40:79:06:a1:0a:a6:ed:b7:2f:44:fe:4f:
97:54:4e:20:aa:de:0b:f1:39:ce:42:23:9b:7a:05:26:b7:97:
35:5f:c9:3d:25:9c:e8:b0:f7:df:8a:24:e7:65:1a:6d:54:51:
4a:83:40:5c:51:13:8a:cd:5e:65:82:15:83:6d:c3:cc:e7:f3:
ad:70:1d:8b:13:5b:f4:90:75:40:98:97:f9:3b:87:6b:25:a7:
37:04:03:f5:81:73:e1:02:f0:64:76:df:96:06:59:bc:ed:aa:
07:9b:74:85:48:c4:89:f0:6b:6b:3d:a8:10:f4:66:a1:30:01:
84:ea:fa:af:13:95:e5:29:59:d0:43:f0:b4:c7:bf:6b:82:a0:
5f:34:3b:ec:cc:36:56:a9:e5:53:ed:e2:53:fb:d3:40:4c:4b:
5c:ec:60:e5:9b:3e:fc:88:67:1d:6b:ba:c5:32:f7:78:86:72:
b7:57:9b:94:db:13:dc:bc:cf:1b:fc:94:4d:87:46:e9:dd:fc:
7c:6d:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:32 2026 by rpki-client