Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer
File: JRiNYKv1gleStK_K1bK06Xj6rjA.cer (raw, json)
Hash identifier: mZ6lSQMD9DeNIykDlndmPUyu+iTDRcXg8gJ8PEmz2tg=
Subject key identifier: 25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A4A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Mar 2026 23:45:24 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 136440
IP: 203.13.231.0/24
IP: 2001:df6:240::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173220 (0x2a4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 16 23:45:24 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91C61F3, serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:b0:91:c0:96:1b:7b:ee:86:49:26:d1:db:
c6:5a:3c:b4:b5:89:ca:52:26:0c:f3:e7:cd:ae:91:
20:d8:1a:f8:e1:6f:2e:60:57:39:b9:7e:a2:b7:0b:
d9:cb:1a:da:7a:5b:36:5e:6f:31:f5:ae:5b:e8:e2:
38:f7:6d:64:f9:2e:a2:36:a3:9d:1d:dd:da:53:6b:
9a:92:62:29:1a:fd:96:79:10:06:83:d6:6f:d9:c1:
8c:9a:11:3d:f1:ce:b8:bf:38:8d:27:cf:98:4f:6f:
da:68:c9:31:e3:7b:79:f4:a3:79:a0:53:c3:d7:fa:
65:85:01:c4:06:36:92:1a:d5:87:ea:6c:8f:43:66:
9f:f7:93:7d:cc:77:98:8c:03:df:b2:a5:cd:67:a6:
be:cd:0d:ac:3e:6e:47:80:4c:62:fb:c2:e7:ac:2b:
b2:c5:8d:14:66:ca:5d:aa:58:d1:d4:20:fa:6b:b5:
c9:6a:0b:8e:b7:b6:9c:e9:af:95:62:a6:2a:55:01:
f2:40:55:1c:0d:4b:da:7e:8c:3f:dc:b7:4d:b0:77:
c0:f2:57:7e:eb:f5:e1:a9:27:bb:eb:24:e6:18:ab:
a5:f4:35:1e:47:76:a9:4e:70:4e:09:e1:a6:99:b7:
7a:cf:44:05:75:a6:b0:cf:ef:2d:ae:f7:ff:3d:8d:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136440
sbgp-ipAddrBlock: critical
IPv4:
203.13.231.0/24
IPv6:
2001:df6:240::/48
Signature Algorithm: sha256WithRSAEncryption
ae:73:54:8f:13:ce:7f:29:25:6a:d4:85:7a:24:26:c0:d0:54:
1d:16:ef:9b:d0:be:8d:22:47:9c:d3:c1:5b:8c:9a:ed:91:5b:
70:59:11:61:b5:55:c8:3a:7d:dc:f2:b9:bb:49:0a:e6:f6:f4:
1b:60:8e:f5:33:71:05:c3:9e:c6:40:a8:e7:21:d3:01:21:07:
48:d7:f0:90:1c:00:3a:ba:15:8f:9e:23:0b:9b:a0:16:97:7f:
6d:50:72:76:74:21:06:d7:3b:78:d5:6a:fb:a1:48:8e:aa:cf:
79:d1:40:a5:0a:b8:c0:41:91:77:29:1b:27:8e:63:77:92:29:
fc:e2:3b:8c:6f:2d:8c:8c:0a:ec:5c:34:d9:e5:6c:7c:b9:ed:
cd:2b:51:9d:96:7a:f7:e1:c4:07:b5:f6:69:ce:9f:c3:2d:78:
7b:57:ac:99:e5:ad:0b:32:b0:7a:24:01:91:c6:21:12:9a:0a:
d6:0b:dd:89:24:34:25:3b:70:a2:af:e9:27:fe:95:f0:ea:29:
1e:cc:22:77:8a:e2:be:31:e3:31:e9:b7:ac:56:35:39:be:48:
a5:d7:69:db:87:1f:06:1a:2b:9d:d1:20:e3:10:77:a2:a4:e4:
6e:77:84:1a:f8:01:bf:53:d8:15:14:78:2b:fd:10:ed:70:2c:
cd:e8:d8:c2
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAqSkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMxNjIzNDUyNFoXDTI2MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzYxRjMxMTAvBgNVBAUTKDI1MTg4RDYwQUJGNTgyNTc5MkI0QUZD
QUQ1QjJCNEU5NzhGQUFFMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzIrCRwJYbe+6GSSbR28ZaPLS1icpSJgzz582ukSDYGvjhby5gVzm5fqK3C9nL
Gtp6WzZebzH1rlvo4jj3bWT5LqI2o50d3dpTa5qSYika/ZZ5EAaD1m/ZwYyaET3x
zri/OI0nz5hPb9poyTHje3n0o3mgU8PX+mWFAcQGNpIa1YfqbI9DZp/3k33Md5iM
A9+ypc1npr7NDaw+bkeATGL7wuesK7LFjRRmyl2qWNHUIPprtclqC463tpzpr5Vi
pipVAfJAVRwNS9p+jD/ct02wd8DyV37r9eGpJ7vrJOYYq6X0NR5HdqlOcE4J4aaZ
t3rPRAV1prDP7y2u9/89jYLdAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJRiNYKv1
gleStK/K1bK06Xj6rjAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM2MUYzLzMwOEU4MTFFMjE5MjExRjE4OTQ0QUFDRTBEM0Q4QzY3LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNjFGMy8zMDhFODExRTIxOTIxMUYxODk0NEFBQ0UwRDNEOEM2Ny9KUmlOWUt2
MWdsZVN0S19LMWJLMDZYajZyakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhT4MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyw3nMA8EAgAC
MAkDBwAgAQ32AkAwDQYJKoZIhvcNAQELBQADggEBAK5zVI8Tzn8pJWrUhXokJsDQ
VB0W75vQvo0iR5zTwVuMmu2RW3BZEWG1Vcg6fdzyubtJCub29BtgjvUzcQXDnsZA
qOch0wEhB0jX8JAcADq6FY+eIwuboBaXf21QcnZ0IQbXO3jVavuhSI6qz3nRQKUK
uMBBkXcpGyeOY3eSKfziO4xvLYyMCuxcNNnlbHy57c0rUZ2WevfhxAe19mnOn8Mt
eHtXrJnlrQsysHokAZHGIRKaCtYL3YkkNCU7cKKv6Sf+lfDqKR7MIneK4r4x4zHp
t6xWNTm+SKXXaduHHwYaK53RIOMQd6Kk5G53hBr4Ab9T2BUUeCv9EO1wLM3o2MI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:14 2026 by rpki-client