Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer
File: fH06qZRpRKT9iR5GspbjygcKOF4.cer (raw, json)
Hash identifier: a9ebCwXOmiVTyNykzn9FULvH4A/oTcWZJDu+yzyZk4w=
Subject key identifier: 7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A447
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Mar 2026 14:41:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 135294
IP: 103.212.194.0/23
IP: 2404:a680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173127 (0x2a447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 13 14:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91FE449, serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:8a:45:59:bf:ed:53:c8:c5:b2:28:ca:d9:
d6:18:b7:76:c7:78:77:d9:f5:49:3f:93:48:55:8d:
67:c1:8a:be:dc:c1:5b:a3:8b:34:1d:bd:67:68:cf:
ae:c8:d5:f5:ce:db:85:e1:8f:c1:1a:8a:8b:5b:8f:
39:69:91:7e:e8:b1:ff:b5:0a:0f:50:ac:38:7d:b6:
70:7b:c4:de:5f:1d:fa:a8:75:52:53:82:59:60:52:
28:e8:46:42:75:ae:0b:a6:68:41:c9:93:41:e4:df:
f0:86:32:a6:86:dc:cb:ae:2e:82:66:66:f2:43:8f:
13:3b:dd:43:20:41:c5:22:26:77:73:28:27:42:d0:
60:13:3f:f7:da:e0:79:2a:e5:11:f9:07:f6:53:62:
3d:60:fc:a6:73:ad:97:e9:ac:2c:e6:9e:74:c1:45:
72:99:9f:fb:9f:d7:c4:1d:81:39:ef:f4:eb:f8:1b:
e3:2d:db:a2:02:c2:99:da:33:e7:1e:ac:b6:a7:36:
7c:20:a7:26:c2:f0:4f:3d:ef:6d:c8:ae:f0:45:9b:
03:1f:dd:e9:80:2c:d8:27:2a:e0:d0:2c:28:14:f1:
cc:d6:62:99:ca:9f:67:fe:d1:3f:ab:a5:2a:2a:4c:
d5:51:9f:96:57:84:40:9d:34:6d:2f:f1:00:20:6c:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135294
sbgp-ipAddrBlock: critical
IPv4:
103.212.194.0/23
IPv6:
2404:a680::/32
Signature Algorithm: sha256WithRSAEncryption
09:b9:4b:31:3d:df:a5:9d:57:e7:82:75:79:b8:99:fc:4e:5e:
28:18:c3:4b:fe:27:0e:a2:85:f3:eb:8d:76:5f:9d:68:c0:34:
7d:e8:b7:48:60:b5:67:fc:b1:86:d8:17:71:74:ab:69:92:7d:
d2:af:e2:21:bb:0c:ba:0d:11:10:03:39:91:32:f9:7b:9b:62:
80:cb:9e:44:ae:12:d2:21:cb:25:dc:87:60:8b:fd:1c:54:0c:
b7:a0:98:98:62:22:7b:24:dc:b0:02:73:c1:b0:36:81:f6:1d:
21:ae:0b:58:e9:28:6a:85:65:78:bf:ae:31:82:41:ff:29:9c:
17:a4:5a:55:b3:f8:8d:20:39:97:18:f9:c6:5b:4a:c3:2b:48:
5c:2d:a2:2e:90:af:3c:f1:41:6a:67:59:77:6c:d7:06:4d:f5:
ad:05:aa:c4:c8:4e:f0:d8:93:bc:cc:f9:ca:e1:45:6c:39:cf:
1b:7b:a6:86:64:33:b9:c1:40:18:af:b5:ab:e4:6e:38:cd:68:
72:97:77:27:e6:0d:95:48:9d:a0:0d:4f:e4:e4:6e:9b:0d:ae:
97:64:85:7b:f1:f5:fe:f9:8d:b5:71:b1:c6:c2:9d:68:59:1e:
79:c8:25:43:5d:03:f8:de:b8:f7:48:97:db:20:fd:d4:74:f5:
be:5c:84:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:37:00 2026 by rpki-client