Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer (raw, json)
Hash identifier: 2hHM9bVkTuEmwXmDGCAbdWjVlHjJTRJxqf0F1GoXMgQ=
Subject key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AF0B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 26 Apr 2026 14:01:05 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 138925
IP: 103.137.72.0/22
IP: 2404:ac40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175883 (0x2af0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 26 14:01:05 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:ea:34:b2:b4:d5:9e:6f:ed:98:9e:b1:fc:
97:fd:1c:60:0d:26:15:db:98:00:4e:b4:5d:8e:a2:
10:6a:a5:b7:37:d2:87:46:f3:28:62:e7:cb:2b:0e:
a3:a3:da:75:bf:2c:79:5b:32:94:5e:7a:33:0c:34:
22:73:05:a7:2f:40:e0:83:7b:87:8b:f7:56:17:bf:
9c:2c:f6:a1:77:04:94:1f:b1:92:24:0d:cc:c1:36:
4f:56:27:37:2d:2b:13:5b:59:0d:7a:b2:76:e0:6d:
c8:96:ae:24:9f:ed:3d:eb:7d:16:19:32:fe:1f:38:
ff:9f:51:ee:e5:e1:59:15:30:87:50:60:23:b5:29:
78:12:9e:d1:40:56:e4:c3:ce:be:ac:c7:46:ce:d4:
a2:75:79:a5:9b:4e:37:6f:de:2e:34:93:b6:47:cd:
d7:b4:5d:38:ec:f7:39:a9:92:62:02:64:68:73:f6:
36:21:dd:cf:af:be:c8:47:61:cb:f3:f9:04:71:e5:
d1:b4:7f:18:19:d4:54:8d:da:50:f1:dd:93:33:f1:
04:14:2a:84:28:5a:1f:69:f3:29:9d:56:88:00:c6:
0d:c1:81:f4:6b:7d:1d:f4:d8:5c:59:be:bb:de:ef:
a1:a2:ab:6f:18:c8:f0:65:6d:68:75:0b:53:e5:ad:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138925
sbgp-ipAddrBlock: critical
IPv4:
103.137.72.0/22
IPv6:
2404:ac40::/32
Signature Algorithm: sha256WithRSAEncryption
ad:e6:6d:08:59:8c:a4:91:98:ad:3b:8d:bd:ab:1a:4c:1a:a7:
44:b7:75:4f:db:19:f5:9d:2a:52:7b:dc:5f:58:bc:03:32:dc:
b4:70:12:c1:f4:f0:c3:52:42:89:67:e9:1a:e0:04:bd:07:81:
48:a4:d0:d9:fa:84:50:2b:03:0a:a2:d8:ef:53:e3:d3:55:cb:
3c:e4:73:f6:6a:b9:af:94:17:b5:b2:19:d5:86:44:f6:52:1b:
79:11:5f:2a:0c:48:ea:71:8b:12:3a:5f:7f:ec:97:f5:ed:f3:
0c:ac:63:c4:78:9c:88:6a:ac:eb:90:63:e4:d1:44:c3:a2:8b:
4d:9d:f2:96:4b:83:c7:4a:07:ea:06:ae:43:6a:4b:01:44:7f:
9c:ba:4a:dd:e6:c2:de:90:01:1f:cc:ac:85:a8:1c:e0:ab:51:
5b:4d:2e:42:fd:a4:0e:38:93:3b:b9:bb:48:33:80:61:ed:68:
35:1a:7a:2d:ba:43:ea:cb:fa:40:7b:f0:4f:82:72:8b:e8:e6:
0b:c4:26:73:8c:77:69:cd:92:9f:47:34:1c:db:82:15:3c:fe:
89:7a:b6:8d:d1:32:46:39:08:a8:a8:70:c5:9a:8a:9e:9b:5d:
1a:74:e8:73:17:91:16:6b:7f:84:8d:36:ae:35:57:3e:3e:6e:
3f:ce:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:14 2026 by rpki-client