Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer (raw, json)
Hash identifier: X1e5GyBOoXMitwp8DTnM5r1ruxqM1ainNtc+Et3b5NM=
Subject key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C69A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 13:56:32 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 139466
IP: 103.141.199.0/24
IP: 2001:df1:b80::/48
IP: 2402:6820::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181914 (0x2c69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 13:56:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:bb:08:2d:27:79:56:7b:1e:01:a0:5d:47:
b3:92:b3:ba:e3:ca:28:f3:7e:8c:a3:4c:36:aa:c3:
e3:93:15:c0:3b:66:88:8c:07:4d:e2:c6:84:8b:cb:
c3:b7:0c:b7:95:b4:49:f6:e1:bf:75:59:5f:da:0f:
df:b7:d0:48:4c:b3:a6:4e:41:fc:fc:5e:8b:e4:c1:
97:fd:b2:0e:cd:e6:be:96:04:15:74:ab:cf:17:56:
43:68:e1:f7:51:f4:ff:e8:22:51:b7:1a:dc:81:e0:
3b:92:dc:2b:78:f6:12:4a:e2:0b:b6:17:47:1c:f6:
79:b8:f5:73:e0:67:02:0a:4c:0f:ee:e0:45:de:ac:
28:b8:c7:3a:62:0e:41:e1:2f:b9:02:b7:c9:59:57:
12:fe:2a:43:d9:a0:ed:ed:74:57:b6:72:54:84:d0:
01:e1:85:4a:be:c5:76:5f:28:e5:5d:94:ea:ec:a9:
43:a1:c9:0c:89:97:e3:6e:b1:b5:32:54:c3:1c:ce:
a1:be:b3:ed:c3:a0:70:aa:7a:60:57:18:82:f1:9e:
7b:f2:b2:8d:11:6b:c0:fc:e2:9c:db:5c:18:41:e3:
32:5b:fb:e6:ae:1d:62:af:82:2b:09:0d:5a:4a:2e:
40:d1:a1:5c:b7:b3:02:79:73:45:a2:d6:99:88:bc:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139466
sbgp-ipAddrBlock: critical
IPv4:
103.141.199.0/24
IPv6:
2001:df1:b80::/48
2402:6820::/32
Signature Algorithm: sha256WithRSAEncryption
12:ce:e8:9d:78:d4:5f:53:4b:9f:0a:48:cd:0e:ac:23:b9:ee:
4c:a4:cf:17:f1:fb:fb:dd:b7:69:6a:e1:50:e2:cb:d9:80:36:
be:f2:a8:f1:96:3a:58:f1:36:96:60:18:b2:5f:7a:f2:8f:37:
13:5a:a0:97:d2:a4:9f:7d:09:e3:db:3c:c4:5c:7f:95:95:90:
b1:70:90:e7:63:a9:12:3f:84:80:2a:14:a0:be:c2:97:cf:b5:
4b:98:bf:b1:b3:52:ef:3e:3d:5d:71:87:76:6d:41:e0:9e:db:
0e:b0:5f:73:33:aa:5b:69:8f:de:95:88:cf:bb:a8:10:71:ed:
aa:e5:7b:80:22:dd:e1:39:29:18:f9:87:a9:bd:cb:67:f4:5c:
bb:7d:49:e7:c9:41:5b:ed:4b:ba:87:e4:a2:a9:28:ab:f3:e3:
cd:1b:23:bc:77:73:26:aa:1e:b4:ec:85:99:83:16:e9:19:59:
1a:34:ff:4c:50:e5:0c:70:ee:f0:a2:8e:2d:c0:46:bc:49:97:
24:c2:25:c2:b9:e8:ff:8e:ae:8c:00:0e:24:6c:7b:be:d2:14:
bd:00:83:59:ba:fc:a1:a3:10:c4:ef:50:11:8d:57:bb:bd:51:
31:33:07:0d:5d:a1:d3:d6:16:36:b5:2e:ad:f9:fd:e4:ea:c2:
87:b8:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:44 2026 by rpki-client