Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer (raw, json)
Hash identifier: agWb28sOPDoS/uUJ98+Q2uY2/hDBmy+uiKkRE1x25UM=
Subject key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B3F6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 May 2026 13:46:45 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 137823
IP: 103.115.24.0/22
IP: 2402:dbc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177142 (0x2b3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 11 13:46:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:6a:2a:92:b4:32:15:3e:85:d0:e5:a2:c0:
2b:8d:ed:f8:c2:0f:84:48:30:4e:03:5c:2e:00:8a:
4e:13:f2:a2:12:0f:57:2e:b6:48:81:01:6b:17:b7:
be:92:e2:84:a9:c4:ac:2e:f9:63:22:79:62:09:75:
c0:3d:ce:98:54:a9:44:d6:f7:a5:c1:9a:97:ca:60:
2d:1a:1b:6c:d4:cb:02:44:b6:7e:32:a3:ca:c2:6a:
a8:6f:46:06:60:f8:02:97:a1:db:a4:a9:d5:1e:8b:
bc:41:73:c6:f8:00:47:f0:5b:c1:c3:4c:a9:df:de:
1a:3c:be:4b:f3:12:a8:43:57:9c:b3:d3:49:bb:10:
b6:c9:40:88:c6:06:8c:9b:59:5e:36:8f:4c:db:c7:
39:cd:4b:62:49:1b:a5:34:06:1b:42:06:37:78:54:
fb:9a:1c:50:6f:4d:29:1e:a9:bf:72:f7:27:75:b9:
b1:3c:62:99:a2:f6:47:ed:3b:4b:43:05:d1:d1:cd:
bd:e0:28:16:ef:59:86:24:6f:7e:1a:d1:98:75:88:
41:30:bd:1a:ff:4c:46:d7:8a:d3:47:3e:32:5c:d6:
7f:a5:e9:2d:63:cf:25:88:97:51:db:f8:01:63:0b:
40:63:b2:1b:fa:26:16:bc:4e:f4:e7:37:16:77:51:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137823
sbgp-ipAddrBlock: critical
IPv4:
103.115.24.0/22
IPv6:
2402:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
b9:90:68:63:f3:95:eb:95:7e:f2:05:ac:26:0e:da:6b:0e:bb:
02:fa:17:ff:5d:79:b9:16:ca:9e:aa:3c:61:e6:0d:ad:7d:ea:
ce:58:1a:8f:7c:d2:e1:35:cb:f6:91:f5:84:cd:4c:ee:24:24:
09:7d:72:d0:69:99:9b:86:94:04:ea:6b:ce:68:7a:e4:4a:fa:
06:13:79:94:3e:ba:ec:2f:23:6b:c5:83:4b:f9:e8:fd:6c:c2:
a0:30:6e:89:24:3f:95:d3:e2:da:1e:b0:db:d1:de:aa:a2:fb:
5d:a3:ee:3b:95:0c:aa:56:fe:21:53:f1:4b:a3:4d:ce:14:a0:
4a:64:84:4f:8d:ed:5c:6a:1d:bd:05:49:f4:0d:a4:68:b9:45:
e1:8a:d0:9e:c0:a9:0c:56:7b:cb:8a:91:20:15:5a:c3:e2:26:
ba:7b:4c:45:97:e5:3c:e0:67:d4:e2:b3:e9:7a:85:d5:5d:3b:
28:36:3f:33:75:31:f7:28:4b:cc:84:11:f8:c4:48:6d:1f:c6:
be:ed:b3:69:6a:62:a4:0f:43:6b:b6:a6:8b:a9:df:63:72:84:
df:98:e4:24:44:80:24:be:32:ce:f6:95:d1:e3:a9:b9:3a:8e:
6a:d0:5b:f9:26:a3:a0:0c:98:e4:44:4a:f9:3e:34:ec:3c:3d:
34:64:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:01 2026 by rpki-client