Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
File: lNLPRKNppCI0T3ZXg78B6YKpxAE.cer (raw, json)
Hash identifier: lQzomMHZYD40NSAO7letpHHxseLwQ5960bB9k7jiUGI=
Subject key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A522
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Mar 2026 00:45:43 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 133911
IP: 43.228.212.0/22
IP: 103.47.224.0/22
IP: 2402:4180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173346 (0x2a522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 00:45:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:6e:71:37:ce:19:07:07:f1:b5:67:01:da:
e5:67:61:40:9d:4b:6c:dd:23:09:83:df:c4:90:ea:
c7:a2:dc:e4:30:5d:e9:c4:ef:50:14:ff:83:e1:2f:
e0:8d:ce:33:7b:35:7e:7d:09:01:fc:c7:82:e4:8c:
d2:f6:a2:94:b0:1d:4d:63:d8:14:23:3a:87:63:ba:
f4:bf:08:cd:6a:3b:71:66:cb:ca:bb:b3:a6:f0:9d:
86:30:0b:df:70:9a:d2:a2:e6:1a:5a:ef:ee:0f:cb:
70:9e:99:7d:1d:fe:91:ad:ff:72:06:33:5f:ec:0a:
26:bd:8c:d5:6c:d7:87:16:c8:64:4c:46:b4:85:01:
b7:60:ff:3d:7c:7c:3f:87:53:e3:13:3a:c5:3e:2e:
5a:ff:35:e6:cb:4b:7a:bc:fd:ac:0d:3a:91:fc:97:
37:81:21:ed:40:29:d0:e9:f5:7f:12:91:55:26:ab:
86:47:b5:47:cb:70:10:e1:13:61:84:8c:0d:79:ad:
11:c1:a7:1a:39:91:8b:46:73:3f:af:18:5e:ca:a6:
c7:ae:01:53:dc:c9:7a:9d:d7:31:b6:ba:da:0f:c8:
3e:f1:69:db:b5:76:85:6b:b0:f0:df:a3:3f:d6:6b:
bb:c7:f4:41:3a:fd:08:93:af:33:50:76:53:bf:02:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133911
sbgp-ipAddrBlock: critical
IPv4:
43.228.212.0/22
103.47.224.0/22
IPv6:
2402:4180::/32
Signature Algorithm: sha256WithRSAEncryption
9e:8a:d6:36:d7:36:36:cc:9f:3c:b0:3b:62:d3:03:fa:ea:4a:
c3:af:9e:61:e8:2e:96:2e:22:37:20:a7:ec:b5:66:3e:f7:71:
e7:51:86:2f:b2:14:24:c4:aa:3e:0c:fa:d4:71:70:8b:7b:4e:
82:32:29:22:99:6a:5d:fc:d1:7d:24:69:2c:6f:d2:9f:74:d9:
d9:f6:a3:4b:b5:88:82:88:30:0d:62:48:94:b6:05:44:dc:fd:
7d:f1:36:b7:c6:a6:f2:a7:ea:d3:13:f9:cf:52:a5:6e:f7:95:
6e:d4:2a:85:c7:ad:66:31:ba:42:2e:94:b8:b7:a5:6c:e3:ff:
47:00:b2:58:a6:b3:24:3d:64:80:98:4e:21:44:ea:39:77:d2:
27:29:c7:29:94:46:4b:55:08:bd:6a:ed:8d:80:e4:df:b3:90:
64:a2:ce:75:ab:65:0f:6a:0d:90:b5:19:71:7a:66:52:db:99:
f3:14:ba:56:82:2c:45:af:17:39:90:02:f1:16:60:1a:e8:52:
11:6e:f6:c4:71:9f:a7:58:38:5b:a5:8e:bc:8a:b3:71:0a:58:
04:c4:b0:c0:77:e6:15:67:c5:e9:b8:63:e8:dd:a5:99:10:5c:
ed:28:95:69:57:dc:3e:82:e8:b0:85:6d:3d:f9:47:8c:60:dc:
64:b2:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:59 2026 by rpki-client