Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
File: khLuorkaMmYPdScf7IWJswnDifA.cer (raw, json)
Hash identifier: UeO8IDcn/XExdBMMA+PiacjoxltO3JmW03MdTDdWDlw=
Subject key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A20C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 13:56:00 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 149761
IP: 103.162.26.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172556 (0x2a20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 13:56:00 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:07:26:11:fd:30:e4:f6:b9:ea:fc:8f:3d:
d5:ec:6c:e3:40:ff:d5:d7:94:60:0d:d9:fb:35:ab:
a1:af:a0:1f:ad:47:e8:1a:d6:f8:cb:e8:c5:b7:88:
42:a5:70:34:02:61:92:b4:57:7e:b6:17:73:7a:12:
54:ad:ea:88:f0:bc:3a:a4:36:91:4a:41:ed:e5:4c:
b9:25:40:8c:f4:8e:e3:08:19:e1:a2:78:af:81:23:
fa:a0:fb:1a:1e:3c:d9:81:9f:86:d0:63:a7:56:8d:
a2:1f:f1:f5:55:ef:28:81:9f:ef:0a:61:e3:ae:c7:
12:00:f0:2e:db:88:23:e1:15:9a:dd:d8:e1:d7:10:
e9:c7:f3:71:b1:4e:70:11:cd:1f:38:1d:f0:97:f8:
26:a3:16:a3:99:51:58:df:0f:10:dd:9a:7f:a8:e3:
60:49:24:74:10:cd:a6:26:70:39:46:ac:bf:57:9b:
a5:bb:65:c2:7c:09:b6:d1:75:39:18:35:2e:b9:49:
09:11:ab:23:b9:e5:c0:8e:d8:89:43:28:12:c4:77:
c5:76:0c:31:06:b2:4c:97:91:4d:a8:51:20:05:41:
8f:ca:91:36:f8:00:83:a6:67:f7:f2:ae:2f:13:d2:
e3:8d:d8:2a:ed:08:65:1a:b0:d9:23:a4:31:58:94:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149761
sbgp-ipAddrBlock: critical
IPv4:
103.162.26.0/23
Signature Algorithm: sha256WithRSAEncryption
02:83:fa:22:e2:f2:67:5e:f5:34:dd:4b:54:14:dc:4b:bf:2c:
4a:17:b2:d4:54:24:92:96:e2:d7:6a:64:7e:b9:03:5b:42:23:
af:6e:57:b6:b1:06:f6:23:fc:01:c3:c8:52:e4:f4:6b:fa:5a:
8d:bc:81:99:c6:0f:76:e9:35:2e:b8:48:4d:7f:53:77:69:01:
a5:cb:a9:36:43:1f:f3:9f:9b:85:ce:e8:51:5b:c5:97:76:cb:
0d:43:e7:dc:ee:a4:75:ef:22:e6:b7:1e:01:1d:89:94:c0:24:
fa:5e:3b:07:31:90:74:e3:e0:bb:01:55:42:61:0e:12:24:fd:
cc:d1:4c:27:f8:31:38:96:18:8d:76:dd:65:36:4f:d8:f2:63:
61:1a:bf:44:21:f4:29:d0:14:55:2d:f2:ad:d5:da:3d:84:ec:
2a:ce:33:a5:6e:da:a0:21:59:6a:b3:2c:f2:16:64:66:ce:29:
14:c2:b6:6f:e0:70:75:be:67:8f:46:57:ee:9f:f6:ae:50:12:
f2:08:ef:10:83:0b:48:78:c9:18:b8:17:63:8c:43:9f:c4:86:
7a:62:3f:6f:06:32:91:f5:05:17:8a:90:9d:61:a1:05:c7:9e:
12:36:4a:e9:47:52:6d:fe:55:85:8d:56:92:34:cf:27:b1:ab:
fb:d1:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:04:48 2026 by rpki-client