Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
File: -mtidXvK1FesoHClHEgItLfJM3A.cer (raw, json)
Hash identifier: /sSORh60vix5TyaN5QCpKxGZGeqDQBGFWMCcZeR+A94=
Subject key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A285
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Mar 2026 09:36:33 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 151662
IP: 103.252.138.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172677 (0x2a285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 5 09:36:33 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:83:70:b2:1c:66:e8:62:92:fa:3f:1b:e3:b0:
e0:4f:6b:ca:3f:c1:40:5c:3a:79:ad:fc:47:73:03:
42:5d:58:cf:17:99:02:40:2d:70:fb:84:61:90:95:
a0:f3:be:98:47:07:8c:c9:26:b3:d1:f7:ce:df:04:
01:3f:7f:8b:4b:21:02:ce:0f:7b:d6:e2:5e:97:93:
b4:a9:e3:7d:f2:5c:a4:29:f7:62:68:51:ca:09:4b:
7b:75:73:00:b5:e4:19:e9:b5:2c:25:46:34:5d:b4:
7c:f5:bc:d6:98:04:ac:7e:2d:fd:58:39:db:3d:9d:
1b:95:d2:84:b1:c7:f1:dd:f8:03:9e:30:c2:45:98:
0a:4c:c1:87:fa:87:39:52:4d:60:2a:40:73:38:16:
a5:4a:40:a7:d0:ce:29:67:2e:2e:47:ad:da:a4:38:
b0:2c:2c:df:c4:a1:a0:de:aa:21:c9:10:02:cb:15:
d4:93:39:e1:80:aa:a8:40:12:32:85:14:99:5c:ce:
c2:37:88:60:6d:99:7c:12:52:2f:79:21:a1:4f:64:
eb:83:8f:05:93:0d:a9:bf:7e:d1:e7:10:49:bc:68:
27:c1:d9:ca:5d:2a:f2:77:8c:83:77:1c:3d:ee:e0:
b8:9c:67:5f:57:fe:a6:3b:d1:bf:60:d4:48:cf:5e:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151662
sbgp-ipAddrBlock: critical
IPv4:
103.252.138.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:2c:ce:29:46:9a:76:93:b2:9e:49:eb:0f:e8:35:e5:ce:1e:
c4:0e:1e:d4:d3:c9:b8:55:1c:c0:a9:f2:1f:28:ba:c7:94:da:
f4:41:90:60:71:08:23:e1:f1:27:0c:4c:bb:88:c6:3f:77:c6:
d9:ba:e3:c6:fb:60:74:b4:f1:16:ea:d6:fe:0f:07:3c:92:69:
f5:cd:6c:81:ae:88:01:ea:85:1e:f9:7c:d5:bc:f6:5e:92:95:
17:d7:2b:06:c3:27:da:99:83:29:e4:e3:ff:99:d8:db:64:b8:
cd:7d:af:7e:f2:86:f6:9a:9d:cf:ea:96:e5:5b:e8:59:a2:ed:
48:da:cc:9c:15:c9:65:d4:bf:7d:61:ab:fa:33:5d:82:4e:8d:
c5:50:bf:90:b5:f0:3a:cc:e3:34:ca:8a:15:1c:61:f2:cc:22:
c7:38:c2:b8:90:20:36:a7:57:84:1b:1e:df:20:d9:58:2f:d6:
47:4f:da:f4:6e:98:7f:5d:2b:89:c0:5a:87:94:07:79:63:7a:
41:7c:d3:69:21:e3:ee:5e:d9:b0:3f:88:82:78:5e:52:07:75:
d9:52:cc:90:75:51:a2:97:51:b3:ff:9c:60:40:cf:5e:77:86:
79:23:11:e7:c4:ef:84:1e:44:47:b7:d7:e1:e0:f4:00:89:4f:
36:e0:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:12 2026 by rpki-client