Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
File: 38I-PZBdDoNoEhlZbQgimmlPrxM.cer (raw, json)
Hash identifier: O1F/NMjFpJ9S6axiKo678rFascNV7pkkvxVC4WySdWc=
Subject key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A497
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Mar 2026 14:30:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 132459
AS: 142128 -- 142129
IP: 103.137.220.0/22
IP: 2404:b940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173207 (0x2a497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 16 14:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:24:3e:62:82:25:f3:ca:1c:3b:7b:24:97:
29:ab:d5:32:49:25:5b:b8:54:73:ee:22:d4:1f:ef:
c1:42:2b:9e:a7:eb:13:84:81:d2:3d:8f:39:ca:95:
bd:55:99:40:f7:71:cc:db:d2:54:aa:40:af:99:6a:
ef:58:63:0f:47:5f:b1:4b:77:0a:bd:1c:f5:44:97:
65:84:7e:92:2a:0e:ef:f8:5d:3b:e7:97:b2:8c:0f:
db:76:de:79:25:5a:db:b7:f8:2f:b1:20:67:17:64:
7a:62:4d:7b:67:e4:a8:29:69:c7:ee:c9:cd:23:11:
c6:bb:a5:d0:c7:bc:18:9c:2a:2e:73:9f:b4:f6:2f:
5e:7b:c5:79:13:2a:8f:35:f8:6a:25:df:d7:a2:ec:
dd:f3:50:27:c2:e6:f3:04:54:09:bf:9d:3c:92:80:
ea:3a:03:8c:9f:81:86:b9:51:b2:03:94:1a:d2:07:
6f:af:45:bd:c5:a4:ff:00:fb:81:f4:12:2d:d3:84:
91:84:80:f0:2f:b9:46:e2:96:de:03:ab:f4:9a:ac:
04:d7:bb:83:3f:f9:8e:6d:43:e8:34:9d:8b:7f:d7:
0a:54:bb:90:cb:b7:b0:6e:47:81:63:09:26:1e:30:
d6:2c:57:82:86:fa:76:cb:e8:ea:1b:79:9f:bd:e9:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132459
142128-142129
sbgp-ipAddrBlock: critical
IPv4:
103.137.220.0/22
IPv6:
2404:b940::/32
Signature Algorithm: sha256WithRSAEncryption
04:d2:3d:d3:ef:7a:dc:43:f4:a9:23:6e:05:eb:48:fa:95:0f:
81:06:08:61:64:62:57:13:6a:9e:5a:8d:44:27:fd:69:2f:ef:
23:fa:b8:ee:a3:7f:ab:ce:3d:73:9f:75:91:6b:0c:c3:19:bc:
62:6c:75:29:3a:12:96:87:fe:e7:53:31:3e:30:88:d3:0b:5b:
9a:d0:35:31:b9:d4:4f:40:41:7b:00:d8:b9:42:81:29:c0:c4:
48:21:9c:7d:db:c6:3d:48:66:d0:9e:8d:5a:b9:74:4e:9f:86:
0b:f2:ae:91:0e:17:81:97:8e:e6:31:f3:3f:f5:f7:21:de:f1:
2f:de:57:87:98:62:c7:be:53:96:55:ab:76:c4:8d:60:ac:b0:
37:45:ea:6a:f3:8f:94:d8:a2:69:78:f2:ff:13:de:8e:bc:6d:
2f:8d:7b:1a:0f:bb:26:5c:08:0d:0c:03:01:78:f8:81:42:57:
95:9a:5a:67:b7:dc:31:1a:16:0f:fe:ba:ef:31:48:5b:c8:2e:
29:7b:f1:ca:21:5e:a2:6d:5f:bd:43:c3:d1:9d:eb:f7:52:d6:
a3:65:86:e2:97:2d:3a:66:fc:0b:7d:00:7c:bb:a3:57:91:bf:
8f:35:fb:57:6a:28:f9:e4:57:b4:62:8c:32:d9:99:2c:40:65:
6c:fa:2f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:54 2026 by rpki-client