Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
File: MpUupGGVY1bTd-vdS_oYcqjh5EM.cer (raw, json)
Hash identifier: i2SXvrGDcJa5ZTXgAjmQaPNs3Ooeo0dw1kpDHNQZFBU=
Subject key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C64B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jul 2026 13:17:56 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 38606
AS: 132826
AS: 133020 -- 133021
AS: 134974
AS: 136728 -- 136729
IP: 103.19.32.0/22
IP: 110.92.24.0/21
IP: 202.61.64.0/22
IP: 203.55.67.0/24
IP: 203.171.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181835 (0x2c64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 21 13:17:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:e6:ee:2e:17:61:0c:be:c3:58:a6:28:2b:
0e:70:f1:3c:06:ff:15:cd:36:2a:e0:f6:39:61:4e:
a6:32:6e:7f:26:a6:66:a2:f4:a2:ee:07:6a:17:d3:
7b:a4:51:64:67:7b:b2:38:05:ce:25:c3:20:16:2d:
14:8b:f2:9e:6f:d3:1a:86:c3:9d:c5:d8:84:8f:52:
7b:e2:6b:a8:7d:1b:f7:a1:a9:95:24:36:76:0e:ee:
86:f7:c6:fa:97:57:62:a1:a1:e0:59:ab:4f:64:21:
b4:9b:5b:ac:4b:ed:e0:cd:04:25:e4:c9:9b:87:c5:
c3:c8:af:bd:0f:d8:9c:d4:03:12:58:45:4b:f6:5d:
90:ed:17:33:21:4f:94:2f:1b:b6:c1:d0:a9:37:c4:
ae:bd:a2:f6:b7:f0:ec:93:7d:d6:63:8a:ed:69:30:
10:23:b7:12:9b:f3:c2:7b:de:f2:83:81:12:16:fb:
a8:51:4b:0e:6a:95:38:d5:09:1f:d1:eb:19:86:63:
be:da:1e:62:29:18:d0:a9:5c:32:4d:b4:49:ea:98:
ef:4e:9e:42:78:2a:1d:67:d1:5d:65:9d:0a:e1:f1:
23:2e:6c:e2:bb:19:da:4e:cf:51:39:c8:3c:3f:de:
f2:80:ef:b4:2c:f7:5c:29:ba:e5:23:f9:66:6e:61:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38606
132826
133020-133021
134974
136728-136729
sbgp-ipAddrBlock: critical
IPv4:
103.19.32.0/22
110.92.24.0/21
202.61.64.0/22
203.55.67.0/24
203.171.6.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:d3:0f:c7:1f:e5:8b:c6:7f:87:62:53:8d:5a:47:b0:85:f2:
9b:f0:fc:da:de:a0:61:c5:5c:7c:41:05:73:cd:33:bb:2f:43:
af:7b:2c:51:3e:bf:57:e6:f2:34:76:a5:53:cd:f7:b3:4c:89:
74:8b:80:57:fb:02:03:90:46:43:a1:2d:97:f2:17:00:d7:66:
02:e3:93:76:a1:31:aa:81:ef:98:7a:b3:79:ba:5b:5b:16:e9:
56:06:7c:80:68:82:3c:01:db:79:9d:23:31:c3:30:a7:27:b5:
17:9f:e0:58:f7:02:4f:da:cf:2e:c9:60:4c:1d:5a:ed:b0:f8:
47:d0:1c:1c:e4:fc:fc:46:1d:ac:f9:92:c2:3e:e9:39:60:61:
9e:06:3d:2e:3c:e8:32:e1:96:4e:ad:86:6a:4b:25:c7:1f:33:
56:eb:28:ae:ea:e1:57:62:bf:b5:6d:98:b9:a3:1e:88:af:45:
2b:de:8f:d4:6e:60:13:9d:74:87:a9:43:18:91:1d:34:08:69:
b8:3a:3e:1f:0a:b9:52:04:9c:ff:20:7d:49:0f:22:73:5b:eb:
63:2b:da:ea:27:bb:c5:ba:1a:dc:c8:34:b3:30:22:7f:c9:3b:
5a:a2:50:f4:f2:2f:81:69:9b:39:28:f6:03:dc:70:3a:b2:c1:
c4:8e:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:29 2026 by rpki-client