Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.cer (raw, json)
Hash identifier: GCfYqN0l0dVOJs+NYUL3pG6FJc2MMk49fjt+98c1L6w=
Subject key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C61C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jul 2026 15:17:13 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 17887
AS: 45667
AS: 58430
AS: 64045
AS: 132842
AS: 139010
IP: 43.247.56.0/22
IP: 103.11.12.0/22
IP: 103.106.8.0/22
IP: 103.213.204.0/22
IP: 202.60.192.0/20
IP: 203.159.72.0/22
IP: 203.159.96.0/19
IP: 2405:6d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181788 (0x2c61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 20 15:17:13 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:ef:15:a3:c1:d7:41:9b:13:54:85:08:c2:
e8:eb:43:70:7a:ff:c3:d7:95:23:37:1c:9e:69:0c:
60:2f:5a:da:ba:af:ac:30:73:cf:fa:84:db:af:0e:
ca:f7:31:fc:13:a8:d4:aa:ab:84:b9:c4:93:a9:51:
5c:7a:42:41:4b:d5:ae:61:83:7b:8b:31:0c:45:6f:
63:0d:71:09:25:89:0e:cc:cc:78:85:70:69:f9:69:
ec:d9:02:ee:b8:24:b2:f7:51:15:dc:ba:ac:11:05:
45:b2:d2:00:63:9a:36:4d:43:92:c2:6a:7b:47:76:
86:9f:80:f4:9c:84:f3:b6:ce:72:85:76:b9:3a:c6:
73:77:12:fc:b2:dc:91:2c:97:62:ba:8d:ba:1c:ca:
5e:84:ec:d2:a8:95:9c:ff:a3:dd:0e:75:8d:92:7b:
2f:e0:bd:07:8a:02:12:0c:fd:49:3f:c9:4f:a1:c2:
ae:80:e9:98:1f:4b:a0:01:5a:9b:4f:6f:bb:3c:4d:
a3:be:0a:6e:1a:a6:3f:11:29:58:14:15:c6:57:fc:
5d:89:d1:d5:c1:0b:e3:62:d7:a4:38:f1:1d:ec:6a:
4e:2d:97:be:f7:4b:b3:0c:4e:d7:8f:6b:87:26:23:
bf:55:fe:cd:41:0c:aa:62:dc:03:c1:3f:61:59:d1:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17887
45667
58430
64045
132842
139010
sbgp-ipAddrBlock: critical
IPv4:
43.247.56.0/22
103.11.12.0/22
103.106.8.0/22
103.213.204.0/22
202.60.192.0/20
203.159.72.0/22
203.159.96.0/19
IPv6:
2405:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
54:ae:eb:8e:b0:5a:a8:32:1d:46:b2:1d:0d:ee:eb:ca:f9:51:
6f:cb:ba:47:29:fe:6b:93:84:c8:ab:bb:e4:b5:b6:8e:52:d7:
79:7e:c1:a6:6a:67:2d:65:9f:b1:b2:6e:96:92:80:ca:ff:83:
41:17:b8:23:14:4b:07:4a:e1:00:82:08:56:31:1d:b0:0e:d4:
2e:e8:72:cc:31:82:57:65:6a:cc:4a:60:4a:30:e9:5a:c9:25:
67:17:90:ac:5b:dc:53:8f:51:a9:aa:c6:fd:4a:31:c4:21:14:
c8:8d:67:f6:56:6e:ac:a8:bb:61:e2:41:c1:b2:b1:46:48:e7:
30:80:56:46:81:c6:82:96:ab:36:24:a6:b7:0a:bd:f3:39:ff:
06:40:f4:57:22:30:35:25:fe:ed:99:46:16:0f:e7:3a:a9:fd:
21:5f:45:1a:20:5a:6f:6a:a2:ea:2b:29:ca:47:b2:a7:54:e4:
61:71:89:47:49:ce:1c:ca:15:9b:74:51:1e:e2:4c:fc:86:20:
f8:3d:80:8c:00:7a:9c:86:1e:34:2e:1f:06:cf:e7:e1:45:84:
5c:5d:1c:79:1b:43:3c:8e:17:ee:81:43:68:b6:79:c1:0f:56:
e2:39:e3:d8:f5:78:fb:e4:64:eb:f0:9e:8b:2c:ae:15:f0:5f:
49:38:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:23 2026 by rpki-client