Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer (raw, json)
Hash identifier: c+/RODlAlTmxz8ReDj6xKYvW/p2jmWLMGYOayazEuPA=
Subject key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF7E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Aug 2026 13:42:48 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 136805
IP: 103.96.141.0/24
IP: 103.109.123.0/24
IP: 103.109.132.0/23
IP: 2001:df1:df00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 19:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184190 (0x2cf7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 13:42:48 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:e6:98:15:e4:54:0e:58:08:1b:ab:8d:92:
d9:73:70:5d:74:a0:a3:79:91:16:26:08:5c:f9:5d:
d2:00:c7:3b:78:76:88:50:7a:4c:f4:50:75:ac:52:
68:37:76:cc:d4:08:b9:cf:92:a3:c5:92:d8:fe:0e:
7d:35:84:93:74:2d:f1:3a:40:d9:15:d8:cc:54:55:
a5:25:dd:3c:b9:4e:51:6f:6b:f6:4f:e8:21:30:86:
69:7d:01:76:06:6d:bd:c9:6f:bf:2d:14:c2:3a:6f:
6c:78:bb:dc:b5:cb:08:96:88:ae:d9:0d:0d:61:e7:
22:4c:ff:51:10:a2:c6:3b:fa:20:c8:3e:fc:0f:fb:
ae:bd:06:e6:67:55:e8:7c:ce:49:0e:44:0f:d0:a6:
21:e1:46:50:df:4f:a7:22:ab:ea:86:84:df:31:0b:
66:1f:7b:e0:f8:23:bf:92:c9:0c:68:5d:af:70:e9:
03:ea:3d:e0:6e:52:16:dd:a9:fd:6c:33:8e:f5:7b:
16:68:37:2c:f1:ba:ab:2b:bf:9a:78:d0:4e:0b:13:
72:42:5b:5f:6d:45:9b:ef:98:a4:3e:35:81:07:23:
a6:22:9b:d4:29:3b:62:d9:c5:28:c6:aa:3e:c4:de:
e0:fb:db:ca:c3:47:b9:91:bd:88:34:0e:cc:83:a4:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136805
sbgp-ipAddrBlock: critical
IPv4:
103.96.141.0/24
103.109.123.0/24
103.109.132.0/23
IPv6:
2001:df1:df00::/48
Signature Algorithm: sha256WithRSAEncryption
bc:04:38:32:e8:e8:df:42:44:75:ac:79:75:71:12:30:ee:e1:
e7:56:86:70:1b:1d:69:87:3c:48:d0:92:e6:dc:19:c1:5d:75:
57:3b:89:8d:94:72:e9:82:45:f8:4e:34:69:ce:10:07:0a:59:
5f:19:73:7d:5d:23:eb:70:ae:a1:58:9f:93:3a:00:70:39:70:
1c:4a:e3:76:be:fe:0e:9d:de:69:e8:18:d4:62:21:51:36:e7:
73:ee:78:75:38:d8:8d:0b:5c:03:1d:bf:27:01:43:f7:e0:b0:
fe:81:2c:57:ac:56:3c:57:de:1b:8e:6e:c5:4a:d6:e8:9b:3b:
61:75:07:57:54:6b:80:55:26:9c:28:89:90:60:43:b0:d3:45:
ec:e8:75:bd:e7:86:af:f3:73:ae:74:ef:ae:d8:8b:1b:5d:37:
ab:67:52:0b:d6:1f:7e:45:ef:b0:24:da:dd:88:f6:c5:1f:d1:
a7:f0:9e:5b:8e:bc:98:69:ea:52:06:c0:32:5c:13:f2:12:af:
7c:fc:f2:26:72:65:12:83:06:39:b5:0f:45:07:db:92:d8:5e:
61:e9:2c:91:a2:8e:3f:fb:65:0d:d0:1f:53:a7:30:7c:cc:68:
d2:f6:a7:0a:77:48:1d:58:86:d9:29:c1:0e:59:5f:c5:5d:fc:
42:ad:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:41:25 2026 by rpki-client