
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
File: E0jUaqcLAwOwQCPwSmMFi01pY7c.cer (raw, json)
Hash identifier: Ui1+WVrB5GorxmU7Gon5Jq9Yrv1LcIjz+4N9RWtVVMA=
Subject key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A26F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Mar 2026 20:26:11 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 133624
IP: 103.36.0.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172655 (0x2a26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 20:26:11 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:fc:cd:87:3a:1b:e0:77:22:ac:4a:8f:56:
4b:eb:58:ea:c1:b9:79:bc:9f:a9:15:5e:5c:8e:79:
a1:eb:98:0e:d1:8d:68:b9:04:11:1e:74:24:07:2e:
b3:d8:ff:35:9d:ba:1c:36:2a:62:08:31:8a:f2:b6:
e6:bb:67:c5:07:f8:83:68:52:29:7b:2b:b9:1d:4c:
85:20:1c:59:c8:b1:72:d3:d2:84:e5:4c:a7:b3:c4:
76:59:5b:ed:48:41:ce:c3:b5:c9:82:df:59:d4:10:
0b:4c:c3:e3:54:7a:96:dc:e5:5a:34:4f:d0:af:37:
1f:9b:1a:f9:61:61:af:df:0a:60:3c:86:d2:76:71:
a1:a9:16:71:d6:a0:f9:48:13:41:79:66:6c:3a:d1:
5c:aa:d6:26:45:16:8d:7d:93:3a:9e:d4:b2:bf:83:
cc:9d:4c:40:ba:b6:79:4c:a5:a5:ec:1a:cc:0b:3e:
28:2d:bf:98:09:6c:3d:de:a3:27:a3:be:48:96:4a:
ae:45:1a:fa:71:9a:c2:a3:80:0d:19:6f:a4:3f:ad:
82:b3:b9:d8:b6:0d:f6:30:0c:ef:73:ff:57:e3:b9:
89:5b:0d:77:3a:e8:df:23:07:c8:86:53:b6:b6:03:
13:61:9d:01:1d:ed:3d:ef:03:05:02:ce:6d:a3:53:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133624
sbgp-ipAddrBlock: critical
IPv4:
103.36.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:69:28:75:67:c5:e0:26:46:f2:7d:99:55:6e:b4:3f:15:58:
25:c8:b5:13:ed:f4:d1:10:56:66:f5:24:ec:9d:64:d6:09:75:
cc:18:2a:ae:10:d5:8c:56:63:fe:09:4e:77:c7:b1:29:4a:86:
f9:2b:d1:d8:82:1e:cf:eb:88:ef:8b:e7:63:5d:a2:2b:dd:ea:
4f:42:3b:c7:14:4e:59:a3:6f:f6:88:64:19:3f:07:50:4d:1d:
f8:b7:84:9a:6e:bf:34:39:00:17:19:14:62:58:a9:59:03:f6:
aa:29:e7:66:f9:b5:b4:05:a9:4a:35:a2:4d:a3:f9:af:14:cc:
f0:11:20:45:4d:e9:b9:5d:a7:9c:48:3a:87:02:5d:fd:f1:4b:
f1:f3:b9:f8:58:17:46:2f:b8:2c:12:c6:e0:4f:47:cc:c3:c4:
85:f2:94:c5:d7:33:2d:98:1d:d5:13:1b:97:12:d0:76:41:af:
f6:19:98:ea:21:78:2f:6c:ca:e8:81:6e:65:b9:12:d8:b1:3a:
17:73:b0:5a:21:2b:91:94:d6:d8:27:7e:a3:a5:ca:52:b4:ee:
5d:3d:4f:56:47:fc:6b:c7:b3:23:c4:94:80:1a:cd:4c:5d:35:
b3:8f:76:84:e1:aa:c6:06:15:99:21:de:7b:3d:83:23:96:95:
93:18:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:28 2026 by rpki-client