Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
File: kBqfnorkBi5SGbdlLY6f7n7FrjM.cer (raw, json)
Hash identifier: L6f2iSpaxg26qkWn5Pf6jNAhm73t5Pvr55Gqh29bDQ4=
Subject key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E5F3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Manifest: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Nov 2026 14:12:44 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: AS: 134717
IP: 103.197.192.0/22
IP: 220.158.244.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 17:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189939 (0x2e5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 9 14:12:44 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:ab:31:11:59:15:df:57:c2:29:01:ba:e6:
cd:0f:ef:7d:cc:14:a6:13:a2:aa:b1:87:5a:2d:e6:
d0:f0:57:97:61:d4:c6:9f:b3:d4:c6:66:97:40:4c:
26:c1:74:ae:0a:90:ea:33:2e:71:b1:79:f5:f7:41:
8d:02:d9:30:c9:39:9f:0c:3b:41:6a:f0:ae:ba:86:
16:ab:db:e9:c3:98:8c:05:a6:29:98:4c:3f:11:da:
b3:9d:0c:1f:1f:96:1f:ee:e4:23:5d:4b:71:ab:e7:
ea:e1:eb:bf:7f:d3:35:63:a0:9e:29:fa:b3:31:20:
0e:3e:15:9c:de:e0:6a:5a:f0:50:39:f4:71:5b:ef:
43:b5:e6:52:26:0c:b5:06:5b:f3:55:ff:5d:cb:a1:
59:26:0c:ff:3f:14:56:66:1e:a0:68:7d:3c:5a:62:
10:d9:b9:fa:d6:97:e6:af:de:41:cd:c2:a8:6e:19:
f9:30:8a:e0:0c:12:87:9a:15:db:20:76:46:be:54:
c2:e1:9d:ad:ba:50:45:01:5d:57:6e:fa:c7:49:62:
f1:2a:96:ad:64:de:33:5f:96:8e:2b:14:f7:d1:f9:
05:48:2b:f2:3d:fc:f5:2d:b9:44:7e:06:2a:4b:00:
51:3e:74:37:ac:f9:b7:5f:be:a2:02:2a:16:ef:98:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134717
sbgp-ipAddrBlock: critical
IPv4:
103.197.192.0/22
220.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:ec:bf:8a:52:bc:a2:20:a6:51:aa:ee:36:d8:c2:72:eb:2e:
91:1f:0f:36:7a:3a:37:16:3a:7b:ac:17:9f:0e:8f:f2:c6:d8:
f8:b1:a8:cc:78:6d:b9:e3:da:61:23:99:86:d7:9a:40:67:7e:
01:1b:30:9e:81:a7:77:a7:82:e2:9e:5d:03:18:f1:9a:32:e8:
19:c1:06:67:ff:d7:9d:e3:f1:00:1d:c5:6d:6f:9e:2d:80:eb:
37:2d:50:1e:b3:36:55:14:6a:6e:9a:9b:70:07:3e:b4:0c:d8:
5c:46:3b:11:29:e7:a4:53:f3:db:e9:75:79:2f:e1:b7:3e:61:
62:f2:4d:a6:ca:95:84:df:c1:dc:74:38:6c:bb:90:1e:da:99:
37:9e:49:b7:e7:24:5a:9a:83:a3:ca:6e:d2:a1:81:8c:49:85:
4f:1b:77:cc:a3:40:5f:dc:33:db:c8:9f:85:7f:75:e3:ee:1d:
ac:09:ad:a4:4d:7f:82:92:da:7f:3b:e8:5d:04:bf:ed:fa:f3:
69:c6:25:4a:80:57:db:d9:46:43:99:55:ed:03:1f:5d:d1:7d:
d4:9d:c3:72:f6:f7:60:d2:ab:0b:5d:d8:e0:56:21:90:17:20:
c8:92:0b:19:e2:1a:57:0c:ff:c1:bc:85:d2:c7:37:50:bc:e2:
25:23:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:52:30 2026 by rpki-client