Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.cer (raw, json)
Hash identifier: tKcJOHxCj2PCLqabHdaB7qEnw3iILKwgNWZbU7N9/0o=
Subject key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AECF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Apr 2026 14:25:37 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58617
IP: 103.9.23.0/24
IP: 163.61.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175823 (0x2aecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 24 14:25:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:7b:3d:b3:30:22:94:3b:25:e2:4f:92:c2:
55:6e:54:fb:b5:65:70:26:a5:44:04:b3:5c:9c:19:
04:f6:f8:21:32:8c:6f:4c:75:5c:64:43:49:ff:f0:
42:59:11:94:ba:14:3d:32:5e:17:5e:92:1c:c5:39:
59:64:6c:f4:3d:30:fb:79:fc:1d:c5:85:b9:e9:21:
ec:94:83:28:fc:94:3a:75:44:72:76:50:bc:cb:c2:
bf:91:cf:94:78:5b:27:95:18:6b:7c:cb:ba:2b:f1:
70:23:24:06:7e:b3:17:3c:54:fe:18:36:c1:b6:8c:
6a:f6:a0:33:9b:46:4f:15:bf:58:2a:da:c3:32:17:
d1:b7:46:04:1e:f0:17:d3:b6:09:08:51:03:ba:53:
09:77:bf:88:77:c0:84:97:40:be:b8:78:74:c6:53:
50:b2:51:dd:20:af:de:55:d9:f0:00:09:c3:76:c7:
24:c3:3b:ba:05:52:09:57:aa:7b:40:2c:31:be:f0:
a2:b7:99:19:c9:a9:df:e9:e7:00:76:c2:5a:75:20:
75:25:37:f7:10:96:38:ac:b3:c5:0c:ba:02:68:f2:
f3:d4:03:44:f5:1a:37:21:d8:de:7e:b0:c3:4b:08:
de:58:b0:1e:9f:d5:0d:94:ee:7b:02:ad:93:de:87:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58617
sbgp-ipAddrBlock: critical
IPv4:
103.9.23.0/24
163.61.154.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f3:cf:6d:ea:65:69:2b:82:e0:3f:5c:7d:c8:30:da:ea:81:
0e:4e:a7:5c:c6:80:9e:86:59:d3:bb:ef:d2:59:0b:80:d1:f3:
11:41:55:9b:66:5b:8f:6a:70:dc:a9:e3:64:2f:aa:3d:47:77:
9d:48:09:79:ff:72:88:9d:39:26:ef:96:2f:41:a9:c8:05:d2:
41:00:b9:93:20:ee:33:19:c8:bf:6d:e6:f2:9b:a3:79:b0:50:
f0:00:ce:89:46:c4:be:44:8f:a0:9a:bd:1e:d5:d8:b9:a7:96:
f0:89:27:d7:b7:69:c8:2f:14:91:5c:67:10:61:06:02:30:e0:
d2:26:f6:a1:e7:31:58:1f:ae:97:e6:d7:32:9f:ae:ce:94:6e:
82:20:5b:57:b8:d3:56:89:dc:d8:8e:b8:9e:a3:8d:a4:dc:be:
7c:b1:03:c7:d9:3a:e7:de:8c:d6:99:85:1b:79:d1:31:83:ff:
77:9a:1d:07:02:10:a5:84:7c:43:f8:00:05:ea:f3:c3:15:5e:
7b:16:f2:e4:29:d9:b9:19:c2:de:1d:d9:35:33:d6:4d:51:9a:
38:81:c7:bf:a4:9f:d9:10:fc:56:cd:0c:80:aa:58:07:3a:3b:
7b:76:de:e4:4a:5a:96:31:3d:98:87:b2:76:60:ea:87:f0:90:
1a:28:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:45 2026 by rpki-client