
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
File: B2qM_AnS8rcX4jyBAokXiMq1UT4.cer (raw, json)
Hash identifier: X5LmHt8TZxYT5yIPAgO/B4kw4JTIKl0KebOJWgK9pLE=
Subject key identifier: 07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C6CF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Jul 2026 05:33:31 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 133372
IP: 103.225.212.0/22
IP: 202.123.112.0/22
IP: 2404:d180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181967 (0x2c6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 05:33:31 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A914C9CD, serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:2b:b6:13:35:1f:64:6d:b9:f2:fb:8d:c4:
c4:f8:44:31:62:fa:cf:c3:28:c9:b1:f8:8b:ca:71:
e2:e3:d9:b8:59:a0:0c:33:92:f6:7f:e3:c5:a4:e2:
cc:6e:75:be:4b:ca:00:77:11:a8:36:d6:e0:11:e4:
e2:a0:ab:d8:34:2d:7d:38:20:4c:5d:ce:21:57:5f:
15:b7:79:a2:5a:1e:ad:3a:3d:c8:ad:f9:1f:75:14:
ca:e5:58:ec:06:28:03:b5:a8:4c:34:b0:83:ad:36:
50:70:76:92:5e:fc:95:fb:85:7f:8b:91:03:72:04:
7f:71:54:65:f1:12:72:88:12:e3:f4:41:bb:b5:63:
ed:b5:00:85:cf:f4:71:8f:20:e1:b5:e4:92:1e:72:
a7:99:f4:c6:f7:54:9b:b3:13:18:7a:a6:25:d0:37:
89:52:3d:cb:23:1d:d7:5b:09:8c:93:c2:cd:b5:71:
dc:2f:00:92:44:2f:c5:e1:c6:33:49:26:76:e7:b1:
cd:73:1a:0a:0e:ad:48:d7:2f:88:d2:ce:fe:61:ca:
f9:d1:cb:cd:bc:c5:f6:01:1a:fe:fa:b9:63:10:2b:
c2:1b:1d:ec:3c:39:e7:24:99:6c:5d:a8:da:30:08:
ec:c6:39:56:ea:a4:89:6b:ba:09:0e:f6:50:7e:15:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133372
sbgp-ipAddrBlock: critical
IPv4:
103.225.212.0/22
202.123.112.0/22
IPv6:
2404:d180::/32
Signature Algorithm: sha256WithRSAEncryption
92:01:a8:35:6f:dd:0c:8e:be:fc:60:ed:c1:0f:ed:80:0c:d9:
66:c5:ae:64:2e:67:a7:b4:61:1d:2a:70:26:e8:4b:83:c0:ad:
93:18:67:d3:99:9f:0d:44:19:9d:df:43:18:cb:4f:65:ac:95:
92:90:e5:11:5b:aa:9f:cd:52:db:23:f2:b1:b7:a2:bb:9b:0e:
95:b7:d9:cb:a8:f1:62:88:20:a3:95:95:49:56:da:4f:1d:3b:
04:b1:4e:5c:de:a9:48:3d:c9:b1:86:9d:86:c0:f5:e7:c2:4d:
19:13:6d:d3:d1:48:e3:b0:1b:f2:73:45:31:00:b1:32:2b:df:
c1:a7:6c:72:ba:47:45:e3:66:19:c5:b3:01:1a:67:62:89:80:
2d:82:96:c8:65:ed:7e:b2:16:da:8f:3b:2c:6b:c6:08:2f:8e:
88:20:a0:28:f0:6a:5e:9e:07:95:42:17:2c:39:22:79:e1:d8:
ec:3f:b2:67:8f:96:de:f0:c2:dd:6b:26:e5:27:bc:5d:83:c3:
cb:6b:c5:99:e9:25:96:4b:38:54:ee:fc:d1:4a:7b:15:4e:a7:
76:ea:f4:80:62:93:31:fc:11:dd:8e:30:99:16:a4:96:7c:b1:
1d:b9:12:ef:47:57:b7:03:dd:d6:b0:be:40:41:5d:1b:3d:e3:
ec:cc:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:47 2026 by rpki-client