Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
File: _pmKu7E0uTwc5_hOi5--HdqbZKk.cer (raw, json)
Hash identifier: PO65jux3ksmwDyobF8ICH6l9X860jcYkvIm4lGLR9SA=
Subject key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A2D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Mar 2026 12:27:19 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.48.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172759 (0x2a2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 6 12:27:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:9b:2b:84:1f:49:c7:e1:49:58:0d:f5:60:
27:e4:d6:13:7b:5a:55:72:4e:f9:ce:fd:1d:ed:33:
9e:17:e1:e5:46:e2:ef:e3:20:f9:94:2b:65:b4:c3:
6c:1f:60:6c:1f:30:fa:a1:f3:92:01:1b:59:2a:87:
9a:7e:2b:e9:6a:a7:87:8d:06:31:2c:d6:fa:66:6e:
92:bc:46:9e:04:01:7d:f8:e0:76:dc:9e:fd:b5:06:
11:56:2a:60:ee:29:54:a6:29:a8:8d:bc:1c:4c:b4:
82:12:15:70:20:ba:8e:2c:e5:5f:15:b8:d5:8c:d2:
80:73:88:45:d3:0e:ec:c3:8f:4e:83:af:04:cd:4d:
33:00:61:c7:02:ca:1e:c9:83:1e:b3:d7:02:f5:3e:
af:1d:34:a3:0f:32:7a:ac:64:76:9e:cd:19:5a:99:
e3:84:ad:8f:ea:83:eb:7b:81:db:02:4c:8c:e3:5e:
78:23:74:0c:95:46:94:1e:03:a8:c3:ae:d2:36:07:
1a:e7:30:22:9f:53:d6:fd:d3:32:6f:61:20:99:30:
38:a2:49:88:a2:e1:08:de:16:3f:ce:a0:3b:f1:87:
40:5d:59:ed:9d:5a:46:68:06:df:2f:c0:67:3f:1e:
0a:b8:f8:e9:2d:cb:d7:e3:a6:e2:53:2f:0c:11:fa:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.164.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ec:e8:9a:46:de:4a:f8:ef:c5:d3:70:ab:67:4b:38:5e:64:
68:62:3e:5f:5f:31:f1:7f:82:32:0a:9f:0b:14:ec:37:6a:86:
a2:1c:de:0a:f3:8e:72:60:99:98:f2:82:8d:81:08:ea:b7:91:
ba:2d:dd:d6:3c:cc:59:82:af:b2:3d:70:f6:70:5d:6a:5d:23:
55:e6:99:8d:6b:c3:85:0f:fb:d5:a1:82:9f:af:1f:45:34:03:
2d:86:84:e2:f6:4a:23:c4:28:c1:ba:23:c8:d2:e3:c2:3e:86:
c3:8b:d2:55:b6:78:59:b0:d7:29:e7:ac:d3:06:2b:0a:6f:6a:
ac:63:72:d4:e3:ad:e3:20:12:06:53:6a:5c:00:28:55:8e:e4:
55:d4:47:2d:d7:57:6a:81:94:54:57:dc:11:6c:b8:03:ca:78:
3e:6d:56:26:92:db:d0:87:c7:91:21:d2:12:ca:2d:02:e9:62:
40:93:a6:c6:31:52:f7:ec:c4:9f:6e:5a:41:c8:f0:38:a7:ba:
95:9b:b1:b7:14:29:d4:f9:0b:fb:b3:0c:dd:3a:01:c4:42:e0:
c2:73:bd:28:a0:29:95:93:36:bb:7c:d2:03:ca:49:aa:7c:40:
5a:75:13:51:d1:48:3a:28:ca:57:87:94:21:6e:cb:2d:fd:f3:
63:bf:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:42 2026 by rpki-client