Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer (raw, json)
Hash identifier: Iuc+R6a5xXb8YnGWQT5zbqe3+w9wGN/pPNRdggn4q0I=
Subject key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D37B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Sep 2026 01:00:35 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 45158
AS: 56133
AS: 63926
AS: 64098
AS: 132836
AS: 133029
AS: 133407
AS: 133736
AS: 134720
AS: 135888
IP: 43.245.132.0/22
IP: 59.153.8.0/22
IP: 103.31.88.0/22
IP: 103.47.0.0/24
IP: 103.55.132.0/24
IP: 103.55.134.0/23
IP: 103.61.128.0/22
IP: 103.79.4.0/22
IP: 103.79.172.0/22
IP: 103.98.86.0/23
IP: 103.116.170.0/24
IP: 103.197.232.0/22
IP: 103.251.172.0/22
IP: 120.29.240.0/21
IP: 144.48.232.0/22
IP: 160.202.140.0/22
IP: 202.179.144.0/22
IP: 203.166.216.0/24
IP: 203.189.124.0/22
IP: 221.120.164.0/22
IP: 2400:1240::/32
IP: 2401:8140::/32
IP: 2402:4c80::/32
IP: 2403:780::/32
IP: 2407:1e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185211 (0x2d37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 3 01:00:35 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:e9:bf:b3:8d:07:2b:e4:80:a0:69:91:1f:
8f:2e:14:9d:9c:bb:67:ef:f3:d6:47:5d:62:44:73:
7a:91:07:eb:34:06:4c:73:60:e6:70:83:e7:1d:a9:
80:5f:b6:20:50:97:58:1b:b4:3a:0c:62:95:32:3d:
99:26:62:e6:58:c9:62:50:49:ba:cd:82:41:ec:3e:
e1:23:e0:05:e4:01:b8:00:69:9c:8e:39:52:28:9c:
d3:17:f0:9a:a9:52:98:1d:0b:e4:ec:6f:fb:85:b3:
b8:56:e7:d3:ca:9d:20:00:2e:c4:2f:1b:6e:cf:8b:
28:eb:ae:9c:6e:23:df:8e:7b:fb:df:89:9d:e1:6b:
c8:8b:7e:58:5b:72:96:5f:6f:83:8c:0a:b1:e6:1f:
2e:4a:a8:57:7f:a1:2b:de:ef:ce:f5:b9:b9:c5:62:
0c:5d:82:c1:e4:43:22:43:5b:a0:80:e9:b4:18:1f:
c5:5b:e7:8f:6f:a3:cf:b2:71:c4:42:54:a2:41:66:
e9:f4:41:2f:32:e7:75:10:e9:8f:40:61:8e:9e:7c:
57:11:c7:18:89:e7:7d:17:7a:d3:fa:78:87:17:f8:
db:fb:80:e4:f5:44:e0:a0:b3:14:41:b5:0c:02:9b:
0f:2e:9e:3a:37:f9:15:51:1a:7d:1d:1f:e2:4a:32:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45158
56133
63926
64098
132836
133029
133407
133736
134720
135888
sbgp-ipAddrBlock: critical
IPv4:
43.245.132.0/22
59.153.8.0/22
103.31.88.0/22
103.47.0.0/24
103.55.132.0/24
103.55.134.0/23
103.61.128.0/22
103.79.4.0/22
103.79.172.0/22
103.98.86.0/23
103.116.170.0/24
103.197.232.0/22
103.251.172.0/22
120.29.240.0/21
144.48.232.0/22
160.202.140.0/22
202.179.144.0/22
203.166.216.0/24
203.189.124.0/22
221.120.164.0/22
IPv6:
2400:1240::/32
2401:8140::/32
2402:4c80::/32
2403:780::/32
2407:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
c0:b5:b1:a2:01:09:fc:c7:c0:9b:41:67:e4:60:ce:eb:20:68:
93:bf:6e:0d:98:0d:20:b8:0c:45:3d:6b:62:6e:e3:ba:c0:24:
4d:dd:70:fe:0f:68:a8:1b:6f:1a:67:aa:a8:53:a8:db:b4:a4:
8c:06:a2:ac:0b:c4:6c:05:0a:8d:7b:a4:52:af:c3:45:99:d2:
f5:11:a4:e2:9a:6a:ad:de:b2:a0:d6:32:42:89:35:3a:52:d9:
7e:ad:45:0a:2e:8a:2f:7f:ca:d1:3a:3d:84:78:10:07:82:20:
2d:8b:c7:52:bd:23:2b:90:d6:cf:f5:7b:2c:10:c4:c6:4f:8a:
a0:55:58:5b:db:3e:00:e5:02:f4:0e:5e:c9:21:aa:c9:86:ec:
33:ab:b6:54:c4:dc:61:ea:6a:51:a5:9a:61:29:eb:a0:ff:bf:
68:f5:39:92:69:83:f5:f6:f8:c8:1a:c9:f6:ee:f0:6b:74:a2:
2b:c1:9e:e2:89:82:76:91:31:0d:bb:6a:13:44:3c:a8:5c:12:
8b:be:10:68:8d:b7:9c:66:ab:28:68:32:4b:96:10:a9:88:ce:
db:c1:64:48:9d:cb:c7:72:ca:88:d3:55:2f:69:d5:7f:03:84:
da:1e:9e:94:d9:8f:5f:c3:f5:1f:34:1d:ab:b0:b0:ae:44:fa:
39:00:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:31:02 2026 by rpki-client