Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
File: caPb4vD_0LEHymtXE7Fcl6jj4dE.cer (raw, json)
Hash identifier: zFsvzSnoFxwJn9xTFUklHLhQoWl8XSuHEzbI2kuPBYc=
Subject key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C198
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jul 2026 09:33:08 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 139079
AS: 139083
IP: 103.139.114.0/23
IP: 2001:df0:7680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180632 (0x2c198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 09:33:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:3f:c8:b7:c5:39:a3:60:c1:7f:86:02:2e:
15:db:ca:13:c3:e5:40:2a:00:19:d5:25:80:19:b8:
5b:c3:a3:f6:5d:7b:7f:28:31:54:19:ed:87:a1:29:
ec:7a:cc:32:21:ec:e8:21:94:51:ca:a9:b1:8f:b4:
6e:e3:77:fe:bc:c8:88:fa:ae:7e:7a:d8:42:a3:20:
5a:ee:7c:07:5d:d7:17:5e:05:4d:7a:3c:39:b0:61:
a0:58:67:4e:4a:37:55:a8:9c:0f:df:34:dc:e2:71:
b8:77:ef:0a:c7:8b:15:e7:7b:ac:a0:b6:e1:cf:ea:
f0:a3:a3:45:a7:7d:e6:d9:bd:4c:79:03:40:52:44:
ff:f5:57:3f:91:2d:66:f8:52:57:6e:84:6c:b3:67:
d6:30:91:d7:71:f9:7c:fa:9c:6b:7d:1c:23:66:62:
d5:9d:8c:59:9b:a3:65:e5:d3:ec:f2:ad:33:9f:6f:
30:63:b2:37:ae:35:1d:03:16:88:d7:4e:5f:63:b5:
6f:95:2f:b9:67:93:31:6a:fd:31:4b:f7:31:80:26:
13:cd:e2:93:17:a5:3c:56:d3:60:15:8f:be:37:04:
f2:9e:1d:60:e4:5a:05:74:8a:94:16:7d:d8:2f:0c:
6b:63:a6:1b:4a:75:be:ee:9a:01:45:00:34:2f:28:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139079
139083
sbgp-ipAddrBlock: critical
IPv4:
103.139.114.0/23
IPv6:
2001:df0:7680::/48
Signature Algorithm: sha256WithRSAEncryption
d7:ec:99:86:b6:22:58:e0:6f:22:5f:a4:3b:0e:9c:07:85:ba:
b4:f3:83:05:85:64:61:d3:77:6e:c6:68:2e:58:43:a4:04:7d:
23:e9:41:85:77:97:33:32:d2:91:d1:7c:23:79:32:c8:58:c6:
4b:b7:70:27:8a:60:8c:68:ab:55:19:62:1f:95:78:35:fb:c1:
2d:e4:41:1c:b4:7c:23:f4:45:54:bc:a7:d2:fe:f5:9c:24:46:
0d:b1:25:61:72:c4:30:57:10:15:4c:cf:14:cc:e9:5a:ed:0c:
0c:84:bd:87:85:7f:cc:84:25:12:f5:23:5f:d8:8f:2b:6b:db:
0f:d4:c3:b1:6a:7f:ab:e6:b3:f8:40:bc:fb:38:52:4d:35:b4:
79:3b:49:81:55:d5:e8:fb:2f:f8:09:9b:50:06:51:3c:b3:e1:
75:06:48:76:7c:d3:ef:f1:2b:11:4f:03:33:84:3a:8f:90:70:
fd:18:55:ef:7e:aa:d4:63:23:90:b5:3a:cb:c8:a9:e4:f9:7e:
ad:a8:eb:14:4f:8c:ee:78:83:7c:0e:27:01:02:41:f0:5d:ee:
bd:c8:09:25:d8:e8:f7:3f:ac:95:4c:19:b9:73:a0:a2:d6:f0:
89:ec:73:7e:45:6a:66:cf:ea:4f:b2:a1:24:d3:92:b0:a4:79:
29:1e:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:07 2026 by rpki-client