Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer (raw, json)
Hash identifier: gncSFtDQQU//ReGWCpnGytEzdTb5d6X8b+dhwVAggQk=
Subject key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B42E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 May 2026 13:10:04 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 139043
IP: 103.138.222.0/23
IP: 2001:df3:3380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177198 (0x2b42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 12 13:10:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:c7:48:f7:be:1f:c1:69:4c:02:a1:5b:8f:
5c:89:df:4a:d9:76:4a:b2:49:7e:65:ca:ed:5d:8f:
4a:4f:3d:df:fc:fc:cd:20:71:fa:58:8b:b8:e5:9a:
d5:2d:11:61:64:72:fb:4a:06:b8:64:4f:5c:ac:c1:
75:03:16:54:aa:89:04:fa:f4:75:08:2d:7e:9b:c4:
2a:af:da:a9:81:a2:23:fb:5f:25:ef:fe:db:11:bd:
29:3f:0b:f5:73:63:c9:14:ce:68:b6:f3:8a:53:3a:
c0:c0:19:03:68:e6:ea:e8:4a:02:5a:4f:aa:96:15:
e6:79:e7:86:47:5a:3b:9b:e6:a8:d7:c1:df:47:60:
9a:79:87:eb:db:07:ca:4a:2f:bb:7f:5a:05:5c:ab:
4d:02:fe:6a:2a:76:b0:ad:28:a4:8c:0f:a0:e6:fd:
7d:84:4d:b0:b3:6f:b7:8f:b3:51:43:06:d6:09:23:
50:a5:be:9d:05:67:59:3d:92:23:52:e5:45:a5:64:
97:cf:84:e6:7b:ae:00:35:44:32:8e:bb:88:69:d1:
b9:f9:17:54:5d:60:28:05:51:e3:6b:73:ad:60:f4:
69:d5:0f:1b:5f:d2:e2:14:01:81:9c:e2:13:37:0e:
13:4e:84:04:e5:b8:b5:ad:cc:89:fd:9c:10:f3:47:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139043
sbgp-ipAddrBlock: critical
IPv4:
103.138.222.0/23
IPv6:
2001:df3:3380::/48
Signature Algorithm: sha256WithRSAEncryption
7b:83:2b:c4:99:2b:c7:a1:f4:c1:75:26:16:b7:81:b6:6b:dc:
77:b9:7a:83:1f:f9:0d:aa:e1:fb:bb:06:38:29:5e:af:75:5b:
a1:05:ae:44:86:5f:c3:37:c7:2f:c1:d7:08:60:f5:00:79:45:
99:d3:53:80:ee:49:da:4e:b3:29:01:48:ad:8e:05:f7:81:c2:
23:60:f2:7a:a4:c7:52:8b:eb:93:e4:e5:f4:66:5d:e2:f1:1a:
f0:e5:c6:29:a7:27:e4:19:1e:09:c4:46:27:9f:ab:f3:d4:a3:
19:f8:81:1b:70:e3:2d:77:5a:6d:af:dd:89:44:c6:6a:dc:c5:
dc:68:2f:3a:a6:47:b9:71:26:92:09:6e:23:90:4e:95:ec:30:
cd:24:e3:a8:e9:40:fa:f5:d9:2b:1a:0b:95:a4:e2:1d:10:e2:
20:89:7c:ef:ba:38:03:93:ae:da:32:cd:eb:a5:f1:7f:90:82:
90:27:7d:76:f8:f1:b1:15:b5:61:3c:83:5d:b2:5d:9d:6e:00:
20:05:d3:ba:ff:33:2f:b4:30:47:5b:26:26:9e:26:c1:87:ab:
9e:c5:04:7d:b5:75:81:2a:9b:c0:6f:16:e1:30:c6:a2:89:71:
96:36:60:48:5d:bf:4d:7e:b2:a1:e9:4b:5a:82:00:d0:89:0a:
b7:d2:b3:b9
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDArQuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDUxMjEzMTAwNFoXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUy
RDcyMTczQ0E2M0U5QzRFNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgWMdI974fwWlMAqFbj1yJ30rZdkqySX5lyu1dj0pPPd/8/M0gcfpYi7jlmtUt
EWFkcvtKBrhkT1yswXUDFlSqiQT69HUILX6bxCqv2qmBoiP7XyXv/tsRvSk/C/Vz
Y8kUzmi284pTOsDAGQNo5uroSgJaT6qWFeZ554ZHWjub5qjXwd9HYJp5h+vbB8pK
L7t/WgVcq00C/moqdrCtKKSMD6Dm/X2ETbCzb7ePs1FDBtYJI1Clvp0FZ1k9kiNS
5UWlZJfPhOZ7rgA1RDKOu4hp0bn5F1RdYCgFUeNrc61g9GnVDxtf0uIUAYGc4hM3
DhNOhATluLWtzIn9nBDzR33JAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUgKS4/K7N
AR6Cqk4tchc8pj6cTlEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU1RDFFL0E4RDg4M0VBMTBFMzExRURBREFGRDkwOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3
TkFSNkNxazR0Y2hjOHBqNmNUbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh8jMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ4reMA8EAgAC
MAkDBwAgAQ3zM4AwDQYJKoZIhvcNAQELBQADggEBAHuDK8SZK8eh9MF1Jha3gbZr
3He5eoMf+Q2q4fu7BjgpXq91W6EFrkSGX8M3xy/B1whg9QB5RZnTU4DuSdpOsykB
SK2OBfeBwiNg8nqkx1KL65Pk5fRmXeLxGvDlximnJ+QZHgnERiefq/PUoxn4gRtw
4y13Wm2v3YlExmrcxdxoLzqmR7lxJpIJbiOQTpXsMM0k46jpQPr12SsaC5Wk4h0Q
4iCJfO+6OAOTrtoyzeul8X+QgpAnfXb48bEVtWE8g12yXZ1uACAF07r/My+0MEdb
JiaeJsGHq57FBH21dYEqm8BvFuEwxqKJcZY2YEhdv01+sqHpS1qCANCJCrfSs7k=
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:19 2026 by rpki-client