Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer
File: 3mNivqTO3X139q98BomMu4dkxH8.cer (raw, json)
Hash identifier: Aa4BXI8ArNdRF+3drqb4UsYzVyb1HacC7t9cMzVVEL0=
Subject key identifier: DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE13
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Apr 2026 08:45:36 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 135007
IP: 61.14.252.0/22
IP: 103.248.88.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175635 (0x2ae13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 08:45:36 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A917171E, serialNumber=DE6362BEA4CEDD7D77F6AF7C06898CBB8764C47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:9d:7f:c5:81:53:4e:8f:70:93:c2:6b:1d:
c6:65:bd:d0:10:c9:82:e2:94:8e:87:f0:25:56:39:
c0:55:45:48:cc:5c:e0:09:cf:8d:6a:6e:98:d6:a4:
f8:81:cb:12:6c:24:0b:de:74:4e:fc:ef:fa:84:5d:
43:51:9e:d5:1a:02:e3:4a:79:60:44:6a:47:62:01:
68:c1:2d:f5:a1:48:6e:56:a3:91:81:18:53:35:65:
21:ba:e9:d1:ab:27:6d:54:86:bc:20:80:87:8f:b7:
a1:df:63:c2:1c:29:44:d7:7c:99:55:0d:0e:6a:ad:
72:82:6c:b7:52:d9:1f:77:56:96:f2:9f:ad:dc:47:
f6:75:a6:56:57:51:a6:45:a7:7b:50:2f:7c:af:34:
51:89:69:2d:75:84:67:06:83:69:80:0f:d1:d9:e5:
31:db:83:99:ed:26:3e:2e:0c:5d:89:48:79:05:bd:
f2:c0:85:b4:53:3c:3a:06:85:d4:f1:85:26:92:b3:
b2:84:44:a0:83:f6:8c:b5:c8:86:0f:56:6b:af:46:
4c:7d:de:c8:19:23:52:61:c5:c0:ce:5f:05:cd:05:
da:7d:2b:7d:57:ff:54:02:08:6b:e6:b7:8b:a1:b7:
e6:ed:fa:70:98:af:96:24:03:35:85:ca:03:a2:ff:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135007
sbgp-ipAddrBlock: critical
IPv4:
61.14.252.0/22
103.248.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:23:cc:c9:46:e2:08:bc:42:77:2a:12:d8:db:86:56:a0:5f:
7d:0b:d0:b7:68:18:f8:57:f4:13:e2:06:24:c1:71:f9:9b:1a:
3e:e3:c5:d0:37:ae:d6:4f:c5:eb:b6:ef:12:e6:96:d8:be:f8:
df:30:6c:7b:ba:7b:b6:29:3f:32:28:a9:67:f8:b7:7c:5f:a9:
7b:c2:42:46:a8:4a:de:c8:81:8b:23:29:9d:dd:62:ea:51:2b:
92:2e:8b:c9:fe:4e:61:3d:63:fb:93:36:6e:69:f3:a4:6d:da:
d0:d1:2f:60:59:23:64:f5:82:85:cf:63:a7:1b:d2:66:09:a4:
5b:12:63:ee:11:f3:12:05:81:81:d4:58:93:2d:b3:4a:c6:ea:
ba:bc:1c:73:9c:ff:18:a7:0e:a3:76:15:34:e4:8b:50:66:e9:
00:53:73:3b:4e:25:f5:18:b1:7c:2a:dd:e7:b9:61:7e:11:91:
91:6e:58:b0:0a:42:af:0b:88:ef:fa:7f:36:ac:2a:57:4e:e7:
b3:da:ce:e0:0d:82:96:2f:1a:fe:0f:55:d1:71:90:17:e4:9a:
70:23:cf:43:a1:a9:fc:6c:fa:4e:b5:65:77:31:53:6d:af:21:
1e:a7:8b:9f:98:9e:57:80:6b:c5:13:67:4f:32:42:e4:39:e3:
49:11:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:00:20 2026 by rpki-client