Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer (raw, json)
Hash identifier: KTQ7P4WOxuZLzRoCQwHt9OkLo1CxQ6u6mSZKiVPDsaw=
Subject key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C281
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jul 2026 12:30:28 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 132335
IP: 43.230.200.0/22
IP: 45.64.104.0/22
IP: 45.113.224.0/22
IP: 45.120.136.0/22
IP: 103.12.211.0/24
IP: 103.13.112.0/22
IP: 103.26.204.0/22
IP: 103.250.184.0 -- 103.250.186.255
IP: 157.119.40.0/22
IP: 2001:df2:1000::/47
IP: 2405:7140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180865 (0x2c281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 12:30:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:c7:22:aa:a8:d8:6f:b8:2e:09:8e:54:73:
62:0e:50:03:79:dc:76:19:91:9b:55:35:bc:d6:ea:
26:56:d7:fc:9a:ea:08:d1:08:b2:9e:a9:7f:07:5b:
b3:ab:83:ae:51:f3:81:5d:ce:8c:50:92:3c:1e:88:
61:1d:34:59:e1:fb:05:61:38:f5:03:5f:9a:10:0a:
d3:ed:f6:3e:bb:d9:bc:e2:86:c9:95:9f:d5:12:9c:
e8:ec:40:a6:19:6e:38:c0:7a:41:78:55:d0:2a:27:
66:b9:84:03:be:fa:b4:92:6b:f1:38:1f:86:68:ee:
d5:8e:3c:6b:ae:ab:3e:d5:22:32:0b:50:21:9d:7f:
42:f9:5a:32:ec:5a:13:71:ba:18:a4:a3:9a:c8:97:
f6:98:da:5b:ec:bf:ee:09:ea:65:7a:e1:0e:b4:a4:
d3:b6:16:7b:30:66:30:bd:1c:bf:bd:09:36:da:c2:
6e:cc:55:19:b5:61:0c:52:15:05:15:9e:66:6c:4c:
6d:68:ca:a2:87:6a:0a:49:da:3f:1d:e9:32:63:f8:
31:46:cc:d9:49:34:0f:c5:d0:63:b6:cc:27:81:95:
1b:28:25:99:b7:ee:1b:67:79:d4:8d:37:ef:19:df:
01:e6:e4:f4:76:8f:2c:59:54:b8:1b:e4:62:57:bd:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132335
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0/22
45.64.104.0/22
45.113.224.0/22
45.120.136.0/22
103.12.211.0/24
103.13.112.0/22
103.26.204.0/22
103.250.184.0-103.250.186.255
157.119.40.0/22
IPv6:
2001:df2:1000::/47
2405:7140::/32
Signature Algorithm: sha256WithRSAEncryption
6e:1d:38:62:fa:b1:86:e2:9d:b8:b5:fe:c4:ee:ab:cd:36:e8:
3a:39:b9:2a:7e:2d:78:50:fe:f5:de:47:51:cd:97:61:25:be:
58:71:15:dd:38:90:f6:7f:7a:66:45:98:a3:86:83:4c:13:f2:
8a:f6:c2:53:42:73:bc:c4:d5:89:20:85:bb:0e:58:9c:c9:94:
52:21:74:42:f3:11:4f:2f:fa:7e:6f:b6:59:a8:e1:fc:5f:4f:
ad:7e:20:84:97:64:3e:a2:7d:ce:3e:45:7f:eb:96:86:b7:5c:
ea:d6:5d:3c:cd:44:e9:cd:d9:2b:0e:07:9c:c7:07:da:02:25:
d1:81:83:10:87:c8:ec:48:7d:67:cc:af:d9:31:f9:31:85:3a:
cb:e0:e0:9f:9f:71:ee:ca:be:1c:1b:aa:c0:26:b3:c3:b4:7d:
17:93:18:90:54:9d:91:e6:3a:82:d1:14:03:67:7a:d9:f5:e2:
d2:04:9c:55:79:a7:44:2c:82:a8:4d:b5:96:0a:3c:40:a3:01:
59:24:d8:17:6f:c6:45:92:9c:4f:77:76:c2:d6:8a:71:80:69:
4e:c6:5a:2d:de:77:c8:7f:e5:4a:e8:95:4a:b9:9e:f1:a1:0a:
16:d7:d7:74:66:4b:4b:f4:3e:bb:3c:b7:39:3c:4d:d2:5c:1a:
86:50:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:45 2026 by rpki-client