Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
File: R2e2k72EYu6vqD2egDydKGtiHcg.cer (raw, json)
Hash identifier: w9R7b/yO7bHM97HBAMLoiT9SIpbuOsrpxDNqj/7ilvA=
Subject key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D037
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Aug 2026 14:22:25 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 58437
IP: 103.29.250.0/23
IP: 2001:df5:30c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184375 (0x2d037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 26 14:22:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:e8:92:8b:3c:73:bd:5d:d5:0f:0e:25:29:
8e:b4:1e:64:12:7e:90:68:06:21:9c:3b:07:de:75:
5c:5f:35:06:c9:d9:be:c0:78:ea:de:5c:44:a0:53:
77:21:6e:eb:c8:06:63:a0:b7:e4:18:30:c7:47:53:
c7:50:2d:a3:21:5b:51:11:07:ec:b2:73:44:58:f9:
7e:33:8d:b9:90:76:a1:b3:d7:da:94:92:fa:a0:65:
db:9e:1b:0e:bb:36:28:af:84:66:f4:f2:7e:98:44:
d8:91:09:dc:82:13:9b:6e:a3:47:d1:b6:c3:32:12:
63:bb:6b:5a:8f:94:7a:80:f2:f7:88:f2:63:ab:b2:
c2:b1:56:89:12:c2:e9:58:1d:c2:40:9b:32:1b:dc:
62:d4:cd:e3:b6:07:f5:e8:0e:f6:93:1a:22:d0:54:
94:59:fd:83:cc:86:30:ae:77:9d:14:1b:ac:89:ae:
1a:db:07:d3:83:7b:1d:6a:be:ca:6d:92:f8:36:de:
f0:4f:54:f0:65:74:df:54:d9:ab:af:2a:f0:24:ad:
52:bd:e7:87:2b:56:99:17:c4:d2:f9:e9:90:c3:75:
8d:26:1f:17:28:18:69:0f:6e:bc:ec:e5:84:2b:66:
0e:93:d9:2c:f7:63:70:ba:9b:b0:5a:30:24:0d:7e:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58437
sbgp-ipAddrBlock: critical
IPv4:
103.29.250.0/23
IPv6:
2001:df5:30c0::/48
Signature Algorithm: sha256WithRSAEncryption
8d:18:e6:ab:d3:a4:0a:b0:12:c7:5e:ee:5e:11:5a:90:c1:b2:
5e:2e:ac:c9:b8:27:c3:a9:34:a2:c9:44:d5:98:2b:a2:cb:cc:
9b:96:25:12:4e:f3:8e:a2:74:f3:2c:d6:82:35:37:7d:24:a4:
6b:27:4f:ab:89:62:32:61:48:0d:53:b7:62:56:1f:71:86:51:
a6:74:76:1a:bb:9b:06:be:09:4b:3b:b8:50:76:58:1e:14:e0:
09:38:dd:36:48:94:46:17:c2:3c:bb:7f:47:4e:4b:12:07:d2:
4d:37:eb:48:e3:3a:6c:ab:0c:76:03:88:c0:19:f2:d3:e9:5d:
e9:14:d5:ae:8e:92:0a:bb:27:f9:a2:af:3b:72:68:1f:f4:48:
5a:79:6e:5d:2c:30:aa:5e:32:57:ce:1e:00:42:9b:fa:12:8a:
8f:be:a6:82:19:15:27:cf:2b:c1:46:8d:42:9c:58:c1:47:01:
27:37:ae:b3:ba:af:4c:90:f7:af:0e:64:6b:b7:e6:51:c2:1f:
75:c7:c7:16:f9:a4:fe:5f:fa:b9:a0:9f:92:ee:c2:c9:6f:e7:
dd:1a:5d:8b:f5:c5:90:14:14:ec:f2:3d:5a:fc:c1:9d:65:88:
6d:ea:a4:4e:68:45:e3:4f:2e:d3:b6:7f:29:aa:35:4f:56:75:
e7:ba:d0:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:18:28 2026 by rpki-client