Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
File: bKwrcgiF6COCTBln7fw2Psh0do0.cer (raw, json)
Hash identifier: JlGzEsEVQv5SuxDw84vVqc7WWobzys0yP9e//T7NYbk=
Subject key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A25B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Mar 2026 14:24:13 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 133951
IP: 103.49.204.0/24
IP: 103.93.19.0/24
IP: 103.112.46.0/24
IP: 103.114.231.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172635 (0x2a25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 14:24:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D5BA2, serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:15:3c:ce:39:a0:0d:83:44:0a:71:b3:85:
e1:71:9f:d2:1f:55:ab:45:43:67:7a:f4:4a:03:6c:
d8:f6:e2:07:ec:4d:82:4b:e5:8a:d9:94:81:f9:86:
f0:29:27:16:01:6e:97:c0:f9:42:72:56:81:e0:5e:
bd:b7:0d:17:ee:b7:49:d2:5f:16:74:9e:7b:bc:89:
43:c1:fe:70:bc:18:02:2a:23:a7:31:12:c4:67:20:
a7:e3:04:e3:6e:6f:f5:98:7e:65:95:48:28:ab:92:
dc:6a:a0:60:23:2c:47:ad:b7:68:33:36:a7:a5:98:
22:ca:f1:29:23:f3:80:e7:82:39:43:b8:6e:71:03:
1a:39:7b:5c:73:d8:7d:b0:48:4c:5b:6f:c9:59:d2:
05:cc:76:21:f5:ef:c2:b8:ea:ef:90:67:8b:9d:bd:
3b:34:ec:9e:0c:0a:1b:f7:7a:b2:70:7c:bf:91:af:
78:94:a3:46:a0:e2:c3:39:95:04:c8:31:c7:43:6b:
3a:06:cd:1c:4c:39:b5:f7:74:d4:93:16:ab:4f:43:
76:5d:40:75:36:34:7f:fd:3f:c1:f7:6a:62:8b:46:
c7:68:cf:a3:73:f4:02:f0:67:db:15:48:67:11:02:
c3:fc:5e:c4:00:fd:15:19:af:6e:bb:8f:aa:9b:6e:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133951
sbgp-ipAddrBlock: critical
IPv4:
103.49.204.0/24
103.93.19.0/24
103.112.46.0/24
103.114.231.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3c:7f:5f:27:cf:5e:ff:41:e7:3b:d3:b4:36:42:78:cc:76:
6f:c1:b1:67:37:0a:e2:da:51:99:e5:8d:df:55:57:90:f0:27:
57:df:89:70:13:f6:05:4e:95:b6:bd:67:ee:be:a3:fe:3e:fe:
be:54:db:72:c0:2c:8a:ab:b4:a5:1c:1b:85:2c:5f:a8:c3:b6:
94:ce:98:b1:cb:50:a0:10:b9:58:f7:3a:ac:03:ff:cd:0e:02:
59:e4:48:2a:12:25:e5:9e:79:25:2d:f3:3e:6a:a1:55:3b:27:
80:8f:5a:1f:cf:81:42:98:12:d3:db:96:91:b9:ba:42:cf:72:
11:32:80:8c:28:a9:32:e7:ac:11:78:61:1e:5e:3e:86:5b:4b:
d2:15:bf:d2:94:e6:0d:3e:87:1e:dc:84:ec:cc:93:30:f1:fe:
aa:47:23:45:9f:1f:9e:07:5c:ef:80:7d:d1:8a:8b:81:2d:8b:
74:7b:0c:52:7d:ea:23:21:76:78:20:01:da:7a:e1:c7:c6:0b:
49:be:c1:ee:fd:3d:a8:6c:f5:71:22:16:28:ef:a3:35:87:27:
13:ad:1c:d7:50:27:af:2b:d0:10:c9:26:07:1d:4c:8f:fe:f0:
70:db:a0:21:6f:42:84:35:67:7d:4b:bc:a7:f2:6c:fa:2d:7f:
ed:a0:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:49 2026 by rpki-client