Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer (raw, json)
Hash identifier: A32+9JyNRsmEPZB41YLIbd7r4zDNQvqU3QC6svhhZw0=
Subject key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DD20
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 09 Oct 2026 13:10:55 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 133632
IP: 43.243.44.0/22
IP: 103.38.156.0/22
IP: 2402:1fc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187680 (0x2dd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 9 13:10:55 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:48:31:e0:01:23:5b:fb:39:ce:86:c6:5d:
26:41:b4:e6:11:a8:63:12:d7:c8:b0:bc:2f:bd:52:
4c:69:27:08:73:03:37:0d:95:33:97:3a:ab:65:ef:
c1:a9:c2:d0:c8:2a:0b:1d:a0:31:6a:a4:5b:b9:ad:
df:4b:b8:63:d7:31:65:65:6d:8b:21:04:3c:73:eb:
e5:63:f9:78:2a:1f:1f:e4:f0:24:18:47:18:74:b2:
50:66:c5:72:ad:46:9d:cd:a5:25:fb:c6:af:b7:1b:
c3:be:54:ae:fb:7e:e2:2b:b0:c4:45:5b:e7:89:2c:
d6:c8:1a:ef:ef:98:df:29:06:0c:23:4c:fd:fb:e0:
5b:e3:d3:8a:62:e9:08:36:fb:b2:fa:2b:a7:91:6a:
9d:4f:21:bc:34:aa:2b:6c:13:05:fd:04:ad:d0:64:
20:86:ae:65:f9:7b:fd:68:90:c1:9d:17:3e:74:6c:
5b:47:51:7a:95:17:66:bc:8e:8d:73:de:75:25:6a:
93:6a:ae:e3:5a:a4:49:35:b1:7f:30:4c:87:2e:b9:
bd:a7:74:c2:fa:2e:d5:83:fa:25:7d:68:5c:1a:75:
18:81:53:b2:7f:7b:9e:1d:8c:1b:7c:a7:d6:ee:bd:
82:1c:ee:70:bc:a4:75:e7:e7:43:69:cc:90:2f:fa:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133632
sbgp-ipAddrBlock: critical
IPv4:
43.243.44.0/22
103.38.156.0/22
IPv6:
2402:1fc0::/32
Signature Algorithm: sha256WithRSAEncryption
54:a5:8d:fd:69:ae:b6:8e:a1:f2:e5:dc:d1:2e:57:68:c7:cf:
49:fd:84:57:6a:4a:65:82:22:f2:e1:33:a6:bb:32:b4:5d:ea:
d1:59:9c:65:d7:a1:fd:2f:8c:96:9c:33:73:cc:35:77:4f:f1:
3a:ea:63:f4:73:92:68:be:6f:2f:a8:7c:1c:47:84:8d:27:f1:
ae:51:a7:e1:cd:1f:f1:0e:6c:d1:a5:b2:6b:2f:6d:33:35:11:
1f:e3:ab:e1:b7:41:74:9d:9e:82:de:07:8f:6e:11:ac:51:61:
1c:46:f8:d5:be:40:a7:0e:3a:30:49:bd:0c:b6:42:d6:53:59:
73:9b:8f:92:5e:15:c7:80:22:4e:a9:46:1e:db:69:5d:15:3d:
a3:61:f1:af:c9:ab:89:17:65:6b:77:b1:f7:96:c1:9a:6e:59:
96:ac:9e:e8:5a:c8:cc:36:f3:f9:74:e0:98:e4:18:49:bc:97:
03:be:42:f8:ce:d5:96:94:07:4c:8a:31:7e:9f:31:52:e1:c0:
c6:f3:3c:13:34:04:97:75:f9:c9:7f:ce:bf:1f:86:1c:e7:3b:
6c:c7:23:b9:3f:6e:3e:09:71:05:c3:e3:f7:01:ad:a3:a1:ba:
fa:33:9e:00:11:e1:6f:1e:f7:cd:31:82:b8:31:26:78:3a:e6:
2f:74:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:03:47 2026 by rpki-client