Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
File: csG8nD23m0PzVvI_lWiEjJz7jdU.cer (raw, json)
Hash identifier: yOtEHTvtn53zaDQXrvyFBq3ZKCOX2M5qrMgnqp0Ka+4=
Subject key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A156
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:51:40 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 132745
AS: 141720
IP: 103.24.140.0/22
IP: 103.162.176.0/23
IP: 2406:c100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172374 (0x2a156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 13:51:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:00:54:8a:c9:e5:01:88:f3:a9:fc:97:f2:
8e:26:29:ab:76:9b:4b:2f:58:3a:90:1f:54:4e:a0:
24:d4:84:f0:fb:8a:6a:aa:75:2c:7e:c2:7a:b6:fd:
12:1e:0d:45:ac:bb:73:ec:33:b1:d0:73:a3:18:68:
19:27:37:b7:9f:56:be:ce:0c:b1:5d:5a:6d:66:47:
9c:42:aa:37:1d:35:8e:9b:2b:1c:d7:bb:68:96:a9:
6f:97:81:3d:b4:d3:19:25:53:95:6f:dc:9d:41:78:
f7:67:77:0d:3d:13:d6:aa:ed:a6:50:e6:42:2a:64:
c4:bb:3c:aa:8b:3a:86:2c:61:d2:81:38:75:79:03:
9a:22:ef:ba:a3:09:a8:7d:39:38:f5:75:a4:ec:62:
2d:1c:a5:b1:15:ed:eb:b4:39:93:5d:ca:cd:e9:75:
b9:bd:eb:e0:78:19:b0:a3:e8:41:9b:cc:60:4a:4d:
a1:4a:8b:8e:b4:6d:94:77:04:cc:79:73:8a:53:6d:
b5:2d:1a:3f:30:26:e1:dd:40:f5:45:ce:f5:07:03:
02:3c:5c:47:22:56:e1:b3:dd:bb:ae:a4:c6:93:e7:
7a:53:7e:00:10:31:8e:67:81:99:85:22:1a:6b:b5:
18:cb:25:8b:da:b7:8c:4f:10:8e:02:b5:7e:db:33:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132745
141720
sbgp-ipAddrBlock: critical
IPv4:
103.24.140.0/22
103.162.176.0/23
IPv6:
2406:c100::/32
Signature Algorithm: sha256WithRSAEncryption
94:ea:fd:c9:ba:c1:2d:b3:b6:84:6d:e0:49:b8:54:74:5a:bb:
4a:37:b9:85:b4:f5:99:c1:62:49:62:c6:ca:b1:f6:51:a5:57:
08:ff:29:ec:24:e7:02:69:77:b2:7f:9f:31:5a:b3:3a:bb:29:
ae:e0:c1:c8:2b:80:c4:f4:c9:35:7c:5c:26:9e:58:30:15:ca:
9e:e1:af:8d:2d:54:eb:a2:a6:04:db:b5:36:23:2e:50:e6:df:
13:88:18:94:9c:ec:1d:3d:9d:31:3c:5f:f2:7f:ff:dc:3d:dc:
da:4b:7b:2c:0e:90:29:58:3f:41:83:a7:a4:6a:50:bd:0c:89:
97:0d:94:78:79:69:b9:d7:44:94:13:4f:47:48:30:eb:2a:0e:
e0:fc:a2:36:b2:ae:b3:1d:56:d2:49:12:5f:01:8a:c9:11:0a:
5d:47:89:f5:d6:d0:e1:3e:1d:7b:1a:96:c6:dc:f7:4e:22:ef:
a6:4f:1a:e6:eb:95:64:01:4d:3a:fa:a7:4e:dc:83:6d:ec:15:
a2:ed:9e:3b:5c:be:86:fc:01:6a:55:cd:50:a7:38:2e:94:07:
6e:05:a8:c3:3c:87:67:23:4e:c7:48:0c:e0:f8:34:f7:17:e7:
fd:01:97:7c:6d:ab:20:f6:47:ab:92:28:0d:82:6c:ea:44:46:
d5:b1:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:55 2026 by rpki-client