Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
File: AQtAe3X24zjzr7WajWJxXDwC7PQ.cer (raw, json)
Hash identifier: fimMhdm+ClIvdw6Mdl4KIafUurM6tsOxELG+yT4x6N0=
Subject key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A2DF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Mar 2026 12:45:36 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 137403
IP: 103.107.160.0/22
IP: 2402:5840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172767 (0x2a2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 6 12:45:36 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:a2:ce:c6:1e:a6:b5:a1:df:d4:b5:20:aa:
2a:8b:fc:fd:c9:3f:64:39:31:ba:6e:46:7d:ad:5b:
d8:f5:40:09:e0:ab:c5:1b:68:18:ed:f4:6c:b3:2a:
ed:72:1b:77:68:e5:5c:34:3a:6a:fe:32:f9:02:2e:
68:31:c6:32:95:95:6d:ce:87:7f:53:9a:13:50:7e:
53:8b:a6:b8:1f:43:3a:7a:2b:ef:48:2a:3b:11:56:
fb:94:a2:7f:ca:f5:98:4c:ee:78:be:a3:88:e6:12:
3d:3f:59:87:50:a2:3a:9d:c1:71:d3:fb:b6:45:44:
3c:b4:29:06:9f:39:6e:46:c2:ff:1e:0b:12:6e:0d:
0f:4e:2a:6f:1e:6f:c5:05:46:53:0e:57:c4:9b:93:
c9:c7:9c:6b:53:04:81:de:80:40:d5:5a:41:1c:db:
94:c4:2a:23:62:36:66:ab:18:42:7d:35:8f:33:b4:
2f:5e:11:12:87:fe:e1:18:14:af:d6:ea:3f:c1:00:
92:ac:f2:c1:9e:d9:ab:c3:41:ea:0d:ca:9b:a6:5b:
17:99:84:d3:99:b2:9e:e8:77:49:70:ef:83:1e:3b:
26:ea:c0:a2:57:6b:07:ef:c3:cb:b5:53:fe:28:6e:
16:7e:14:68:72:ad:05:16:bc:b3:56:bc:f4:d5:38:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137403
sbgp-ipAddrBlock: critical
IPv4:
103.107.160.0/22
IPv6:
2402:5840::/32
Signature Algorithm: sha256WithRSAEncryption
58:fa:5e:c7:3f:12:4a:34:d5:cc:f5:a6:9c:f3:bf:db:95:07:
6d:c2:af:09:20:6d:99:3a:a9:5c:5d:ee:aa:9a:cc:f6:98:85:
09:0c:c1:5d:21:0e:ed:14:92:41:8d:16:55:82:5e:23:a6:59:
e2:fc:47:3f:1c:df:45:f2:2c:3a:8b:d9:c7:c5:ca:62:bd:85:
3c:24:93:42:92:35:fd:ef:28:ba:7b:ed:9a:f3:b5:ed:2c:e9:
68:3d:e3:cf:ee:2e:b3:3d:f9:4c:32:c3:bc:e4:5e:e8:a9:70:
ce:b0:30:d2:60:6b:40:d6:b3:ae:fe:c7:31:ad:3f:0d:43:b1:
e9:b0:ea:33:06:72:be:ad:e3:89:59:df:dd:12:65:2c:87:d5:
19:e5:95:50:16:c8:04:f6:bf:b6:e3:37:5f:20:7b:43:ca:b2:
b5:44:15:2c:e4:bb:60:e7:ef:d6:f8:56:b3:33:d6:25:fa:08:
68:2b:0a:ea:06:5e:b4:33:7d:e3:10:cd:c7:8c:24:83:ea:e6:
ee:c8:7a:83:e4:63:6a:0a:88:bc:e0:59:fb:4f:12:6c:ce:20:
91:8e:fe:48:6c:3f:0b:c9:b2:98:dc:77:fc:dd:a1:c0:95:de:
56:a5:c6:d9:45:45:04:13:37:72:a7:8b:9d:b3:f1:54:6b:fa:
83:19:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:09 2026 by rpki-client