Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer (raw, json)
Hash identifier: V9MjTHAFspXZigRc6LvwB65U3BrMWQJSMjZufWHYXf4=
Subject key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C266
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Jul 2026 15:17:37 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 142406
IP: 103.167.214.0/23
IP: 2001:df6:c180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 00:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180838 (0x2c266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:3f:79:1b:cc:37:00:ef:c4:cd:f1:d4:6a:
dc:ec:26:01:9b:92:83:f2:84:69:76:0b:37:b8:a8:
e0:05:97:d5:25:73:a7:36:95:e1:ff:4e:13:33:f4:
1b:90:77:01:d9:cc:a1:c4:4f:48:93:82:0a:fb:cd:
8e:54:b0:65:c3:d0:a0:88:80:9a:ce:de:ec:de:eb:
03:94:c3:23:e1:e1:0b:e2:3a:d0:12:43:6b:99:28:
d3:dc:01:ad:6f:be:12:dc:c0:44:08:f0:db:06:6b:
d7:28:57:df:5e:fb:51:c1:26:c4:e5:2d:f1:18:65:
a5:e6:4d:dc:50:15:58:d3:bd:02:61:b4:42:e5:cc:
e6:1b:f9:46:14:8d:5d:ae:60:7a:5c:8c:0e:76:6d:
b0:16:cc:ca:60:14:ef:f3:d9:a4:67:cb:53:1d:e3:
e3:e9:86:64:d3:f0:df:c4:4b:fd:cb:3f:80:08:2c:
b8:e2:bb:f0:61:10:f0:fe:1c:93:8a:98:33:da:60:
fe:86:40:81:40:b2:0b:ad:c7:54:cc:ae:9c:94:4f:
0e:30:13:89:c0:b0:f3:70:c2:c0:03:7a:3a:e1:c4:
00:24:36:33:d2:39:8b:dc:3c:76:01:e5:2e:4d:83:
aa:e1:2c:b9:86:af:18:87:9f:e2:19:f6:df:4f:f8:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142406
sbgp-ipAddrBlock: critical
IPv4:
103.167.214.0/23
IPv6:
2001:df6:c180::/48
Signature Algorithm: sha256WithRSAEncryption
49:8f:aa:a1:f7:af:0d:5e:83:e2:2a:a3:19:88:05:62:7a:d5:
80:4c:99:53:2c:44:8d:b1:41:92:5f:2d:79:4c:af:8c:37:7c:
be:e4:24:43:2d:46:6c:e0:d1:4b:8d:2c:8f:f1:cb:b8:ef:d6:
3a:b4:54:cf:48:5c:ea:f1:a0:ce:4e:fc:68:f3:71:81:5b:df:
c5:81:29:a8:33:74:ab:68:c7:40:be:99:d7:ed:6b:74:38:4c:
99:af:16:7b:5f:2a:ef:02:94:81:3f:ea:5d:3b:97:1d:08:e4:
00:d5:65:bd:2e:93:20:39:34:9a:ef:0e:89:bf:6f:c8:20:d2:
14:f6:1f:63:fa:70:1b:d0:a8:c0:18:a1:d8:0a:8c:8d:2b:ed:
88:1c:82:c4:01:0d:db:da:a5:d5:ce:9d:73:87:72:9d:ab:26:
a1:95:c6:58:db:63:17:02:16:4b:93:79:66:38:e2:e8:fa:55:
ed:f9:a1:09:5c:17:40:7a:42:a4:fd:54:76:51:b3:e7:38:8f:
80:ad:85:f5:1b:ec:03:90:c5:8d:6b:26:1b:81:a3:c3:7f:a2:
d8:da:d9:d9:83:a6:7d:7c:ab:83:9a:f4:23:d5:5b:a7:9e:12:
fb:5e:cf:3b:cd:10:9e:6a:60:6f:89:9a:b4:3b:e7:b4:a7:ff:
08:dc:c6:f5
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAsJmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcwMjE1MTczN1oXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkw
RkUxMzczODBFM0M0NDM3RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTFD95G8w3AO/EzfHUatzsJgGbkoPyhGl2Cze4qOAFl9Ulc6c2leH/ThMz9BuQ
dwHZzKHET0iTggr7zY5UsGXD0KCIgJrO3uze6wOUwyPh4QviOtASQ2uZKNPcAa1v
vhLcwEQI8NsGa9coV99e+1HBJsTlLfEYZaXmTdxQFVjTvQJhtELlzOYb+UYUjV2u
YHpcjA52bbAWzMpgFO/z2aRny1Md4+PphmTT8N/ES/3LP4AILLjiu/BhEPD+HJOK
mDPaYP6GQIFAsgutx1TMrpyUTw4wE4nAsPNwwsADejrhxAAkNjPSOYvcPHYB5S5N
g6rhLLmGrxiHn+IZ9t9P+Kh/AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUkMa2jRau
Q5Lt8OkP4Tc4DjxEN+cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY3OTM1LzkwNUEzQTQ4OUI5NTExRUNBRTNGMEM0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJh
dVE1THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAixGMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6fWMA8EAgAC
MAkDBwAgAQ32wYAwDQYJKoZIhvcNAQELBQADggEBAEmPqqH3rw1eg+IqoxmIBWJ6
1YBMmVMsRI2xQZJfLXlMr4w3fL7kJEMtRmzg0UuNLI/xy7jv1jq0VM9IXOrxoM5O
/GjzcYFb38WBKagzdKtox0C+mdfta3Q4TJmvFntfKu8ClIE/6l07lx0I5ADVZb0u
kyA5NJrvDom/b8gg0hT2H2P6cBvQqMAYodgKjI0r7YgcgsQBDdvapdXOnXOHcp2r
JqGVxljbYxcCFkuTeWY44uj6Ve35oQlcF0B6QqT9VHZRs+c4j4CthfUb7AOQxY1r
JhuBo8N/otja2dmDpn18q4Oa9CPVW6eeEvtezzvNEJ5qYG+JmrQ757Sn/wjcxvU=
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:45 2026 by rpki-client