Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer (raw, json)
Hash identifier: uzw16/7HTRWXoIludnbF9OUzmDhbRVnSC+YQCffPmYM=
Subject key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B3AA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 10 May 2026 13:03:49 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 136434
IP: 103.87.244.0/22
IP: 2405:f2c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177066 (0x2b3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 10 13:03:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:8f:d4:a2:01:29:1f:ed:1d:5f:7d:45:fa:
54:ba:bf:c3:b4:00:5a:3f:9d:63:a5:e5:b7:bd:6a:
9a:8a:9d:67:10:28:d6:de:af:56:16:0c:d8:9f:89:
79:2e:cf:d8:99:70:b1:03:8e:5a:5e:54:4e:cd:08:
9e:61:3d:1b:6c:ca:29:35:74:0d:78:ba:98:9b:61:
78:40:25:59:02:d1:6e:64:94:2a:b4:75:fb:aa:a3:
57:6d:44:67:06:2a:bf:8e:3d:64:51:f2:9a:a0:6b:
4f:c9:74:7f:70:03:dd:6e:67:f9:14:f8:50:16:b4:
07:cd:15:ed:ed:24:50:ce:01:39:61:1b:5c:bc:d3:
6c:0e:59:95:86:ad:00:d1:50:49:b1:dc:21:d3:eb:
a4:d2:7c:63:42:1c:e3:a4:84:5c:b8:9c:86:5d:48:
a8:7e:c7:42:0f:dc:85:c9:2c:18:43:9e:e1:ad:e6:
b6:f3:bc:18:70:9e:b7:93:50:f1:98:69:96:a1:7e:
31:b8:b9:cd:9a:07:0d:e4:97:f3:7a:74:8d:90:55:
99:2f:e5:9c:13:cd:f3:f5:88:d9:a4:fa:13:04:c1:
82:59:01:da:1e:c0:52:52:ad:40:0c:4d:ec:fd:e4:
2b:8f:d6:ab:aa:eb:95:38:47:91:80:d2:aa:fd:d0:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136434
sbgp-ipAddrBlock: critical
IPv4:
103.87.244.0/22
IPv6:
2405:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:c1:c6:ef:58:ba:e4:1c:a0:c4:93:26:bb:9d:33:73:57:5e:
6a:04:16:8c:b8:fc:9f:76:53:9b:a9:be:9b:8e:4c:d5:2c:24:
de:27:37:12:ae:74:f1:57:ca:ff:c2:f0:e5:43:68:28:59:e1:
24:30:0d:88:cd:3d:d3:ca:ff:60:82:9d:1d:a2:dc:52:66:cd:
9a:af:9e:b3:bb:67:31:ed:f8:f3:4f:9b:13:1c:95:1d:59:2a:
ae:4d:29:b8:ce:46:af:47:7f:9d:ea:0d:94:bc:eb:84:82:d4:
44:2a:26:be:21:e6:96:41:62:93:13:49:d6:50:dd:6d:28:ea:
66:9d:ca:97:2e:03:a6:ea:7e:51:b9:50:e9:11:a9:3a:ec:94:
2b:60:49:28:a6:b1:15:c4:80:c9:44:c9:f9:b7:32:7b:8e:98:
a2:08:3a:58:70:bc:37:0f:32:3a:da:05:62:45:41:3c:c5:de:
b1:6f:03:28:e5:11:67:32:9f:a7:4f:90:51:35:58:bf:a3:78:
62:aa:27:53:53:69:3e:74:89:8d:8a:7d:8a:46:d5:6f:6e:7e:
38:86:ce:4f:21:b8:d5:12:5a:79:a8:f9:bc:73:5b:90:a2:08:
a3:35:41:97:78:5a:96:41:97:5f:39:88:e7:7e:a0:a5:4b:c7:
72:dd:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:06 2026 by rpki-client