Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.cer (raw, json)
Hash identifier: 7Ze6cV36h5kQ4CRPV1wI5BsR5vGZyXCLUV9NG3KyuD4=
Subject key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C4F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Jul 2026 13:53:46 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 149428
IP: 103.190.58.0/23
IP: 2400:8e20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 05:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181496 (0x2c4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 14 13:53:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:33:06:76:88:2c:df:a8:ff:ee:0c:ff:c0:
15:77:1d:af:d7:71:0c:57:d6:10:f6:e6:06:2f:02:
a3:be:99:25:b1:a4:e0:7b:06:55:70:36:a1:c2:3a:
ff:6b:79:5c:db:9d:95:42:30:2c:8f:49:d5:ed:ee:
c2:e3:f8:e7:43:20:79:a1:25:c3:ce:9f:ad:f4:4f:
d2:a3:36:2a:c6:e8:9f:e5:5b:28:34:76:56:27:48:
f9:95:cb:83:0a:a8:5f:7f:28:3e:3c:d7:d9:1d:49:
c7:61:c8:80:25:ab:ea:61:cc:b4:4e:f3:b3:f4:50:
6b:e4:87:62:3a:cc:76:2c:73:f5:49:d5:2d:0b:04:
0a:5d:7c:d6:84:fc:75:09:9d:14:75:8f:fc:3d:20:
55:f6:04:72:83:74:a0:63:67:16:34:38:32:90:18:
86:6f:c3:7a:86:0a:fc:1e:c2:fa:c1:e5:80:f3:e7:
cb:ff:9f:93:44:6e:ad:02:65:27:18:eb:bd:73:62:
76:27:a5:06:b2:81:d4:79:8f:88:3f:b2:1b:b6:2a:
5d:e3:75:39:ba:d4:33:ca:f3:7a:d5:03:89:ff:f1:
99:e6:98:1c:3f:af:7e:d2:a8:7e:75:97:ae:2c:15:
5d:6f:a9:9b:23:6e:f5:14:e5:ed:ec:75:e7:60:82:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149428
sbgp-ipAddrBlock: critical
IPv4:
103.190.58.0/23
IPv6:
2400:8e20::/32
Signature Algorithm: sha256WithRSAEncryption
8e:fe:ea:87:68:b9:a5:e5:e5:b2:a5:bf:75:fe:f0:b3:2d:f1:
bc:12:4d:3c:84:af:30:44:20:89:2d:ca:42:72:11:38:e2:02:
87:45:8d:9e:20:b4:0c:f3:9b:42:97:8b:b5:5c:2a:e0:ed:f3:
b9:6d:f8:02:1e:80:bc:6c:c2:c3:7d:7d:b1:d7:8c:bf:f6:63:
8f:35:cf:3c:32:e5:c0:ce:22:73:ae:e9:dd:22:75:35:b4:c8:
57:d0:3d:c4:ec:e7:88:a6:0a:58:22:2a:e4:66:e1:8c:8a:d5:
ac:57:d0:52:47:a5:7e:da:9c:47:72:f8:fe:15:34:9f:c7:ca:
ce:04:3f:87:e2:aa:f2:0b:6e:95:35:48:42:05:74:eb:2b:3a:
e9:d0:cd:c8:3d:35:d0:27:54:82:82:ca:d4:65:e2:c0:32:0c:
e8:e8:88:5c:f0:cf:a9:bb:85:45:d8:b6:ee:d1:5c:3f:5b:59:
b5:28:91:16:72:44:d6:dc:55:f4:79:d6:14:05:f9:53:90:82:
81:f4:7a:bf:3c:c5:08:59:fd:44:83:42:36:5d:b5:13:ef:02:
67:47:9e:5f:ab:83:6d:ed:f9:8b:7c:d2:51:43:92:ac:da:78:
1c:6e:73:d5:12:a2:5b:af:b2:3a:b4:db:e0:86:81:49:1a:7b:
20:5c:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:45 2026 by rpki-client