Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
File: S18cktxo2UEqrDB3GD-jbdA9zRU.cer (raw, json)
Hash identifier: L4ZhVW+tRezQC08GTOymEaXxqnKjoMfzGkKobul5ZrI=
Subject key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BF2E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Jun 2026 03:15:28 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 149194
IP: 45.112.56.0/22
IP: 45.127.200.0/22
IP: 103.2.236.0/22
IP: 103.106.102.0/24
IP: 103.133.38.0/24
IP: 103.178.50.0/23
IP: 103.196.132.0/22
IP: 103.239.168.0/22
IP: 119.10.128.0/21
IP: 223.29.220.0/22
IP: 2400:44a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180014 (0x2bf2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 24 03:15:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:a5:4f:9b:50:5a:bd:26:af:53:5c:01:3b:
88:4a:63:db:bc:32:c2:4e:f4:2f:7f:b8:e5:a1:38:
0d:05:18:92:41:bf:76:81:ca:30:12:26:63:c3:1b:
fb:14:b5:b3:56:0c:e2:f8:0a:4a:b8:07:07:63:17:
b4:44:4b:5a:39:fb:81:5f:92:c3:c0:0e:18:7f:7a:
7e:ec:9c:e7:3c:54:a8:76:de:10:74:e8:e4:6e:2b:
da:b5:2b:de:4f:63:58:6c:6a:62:41:0a:04:ba:97:
75:ad:4a:c6:0a:ec:fb:31:f4:e3:47:f7:bb:98:32:
e0:81:03:a0:11:fc:d5:0c:10:ec:76:dd:3a:a2:e8:
4e:92:a2:b7:3f:8d:48:51:95:9e:c5:10:b8:24:66:
93:34:01:06:b7:2b:d5:ce:78:cb:87:f8:0b:4c:77:
1c:89:3b:ff:76:40:e5:50:ef:c2:79:78:26:dd:97:
55:d5:bb:4b:28:a6:31:9a:90:d0:fe:43:cd:4e:91:
37:43:61:55:7a:e7:6e:94:c3:93:42:75:c4:a1:9e:
8c:89:a7:c2:3d:11:cc:db:c3:f2:43:c7:84:d8:8a:
53:d2:b4:0e:5c:3b:9f:50:58:0b:76:50:b4:11:7a:
7b:d5:3d:fc:53:f2:ae:af:65:a5:10:37:4b:7b:70:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149194
sbgp-ipAddrBlock: critical
IPv4:
45.112.56.0/22
45.127.200.0/22
103.2.236.0/22
103.106.102.0/24
103.133.38.0/24
103.178.50.0/23
103.196.132.0/22
103.239.168.0/22
119.10.128.0/21
223.29.220.0/22
IPv6:
2400:44a0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:bf:c5:c3:ff:a4:c9:81:68:c0:cd:a0:79:29:26:2a:b5:73:
ec:49:0d:6b:0d:f9:1d:de:47:19:74:42:ba:06:23:fb:01:03:
31:cb:30:fc:b9:df:e9:66:6b:6b:73:24:46:5c:35:19:6c:98:
3c:f2:25:5f:72:f0:cf:15:50:4a:b1:a0:70:0d:c7:db:7d:b6:
17:36:51:7e:fb:7f:91:9a:8d:8c:39:84:0b:97:0d:ee:5d:e4:
b5:87:28:61:ef:a5:82:3e:4b:54:ad:ba:df:be:52:39:c7:46:
1c:bb:f2:19:87:30:20:bb:35:b4:13:8a:6a:05:79:68:a9:3f:
12:04:38:5a:ce:a6:ef:4d:98:f8:52:a5:f1:8c:d3:fa:1d:0d:
f0:18:c3:97:6b:bb:30:b7:7b:60:06:ee:32:aa:b0:d6:7e:68:
2c:f5:75:a1:e1:05:a3:63:07:a1:81:86:ce:e1:2e:77:5d:ee:
17:98:bc:d8:1c:f6:8f:3e:26:4c:2e:55:a0:5d:3c:1a:3b:cd:
91:36:6b:af:41:21:c8:f7:17:6f:62:32:e0:61:f6:2f:17:00:
17:b7:4c:58:63:71:59:71:40:97:6c:54:7d:a9:78:cc:b9:4f:
77:37:94:50:52:e5:a0:b8:3a:bb:32:09:87:e1:24:ce:4a:95:
a6:70:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:24 2026 by rpki-client