
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
File: lRaRgJV2AETnT6qlSX0GcwraXzI.cer (raw, json)
Hash identifier: 1ji7GyP326oGBZ9hAHhyHqsTcJSJQ7+73II/ji8iQhE=
Subject key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C331
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Jul 2026 14:19:25 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 55555
AS: 55859
IP: 43.245.28.0/22
IP: 103.246.96.0/22
IP: 180.200.244.0/22
IP: 2400:b100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181041 (0x2c331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 6 14:19:25 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:4d:ef:83:01:ea:6f:fe:a3:37:5b:23:e5:
7b:e0:93:2b:46:e0:5c:67:c3:50:cc:f1:db:da:b7:
02:d1:d6:37:c6:ba:21:0b:fb:72:1b:d0:a4:5a:50:
49:05:4b:88:35:4f:f4:3a:f8:51:23:5c:09:3b:86:
81:d4:f6:33:ce:cf:9d:5c:d6:30:ac:83:9a:8d:07:
fe:c4:ae:4e:f3:6f:8d:75:dd:a2:d5:19:58:01:e1:
e1:53:80:89:08:0c:5a:ee:d2:5e:00:bb:bc:dd:d0:
ab:2e:34:71:c6:7a:71:62:2d:cd:85:c9:77:6c:25:
d3:31:a2:d8:09:29:74:80:a2:db:7a:f8:df:fe:b0:
4f:54:60:dc:b3:d2:59:51:73:5f:3e:ed:b7:9c:25:
32:ac:ea:0f:81:28:a6:b0:66:83:ce:af:62:c9:77:
70:e4:6a:8a:41:09:03:fc:a8:a2:6f:bc:b0:5a:b0:
ce:50:36:a6:bf:a7:74:82:9b:90:78:95:3d:85:65:
20:a0:ff:39:d3:70:f1:a3:74:56:b0:e9:e4:a3:1b:
26:db:f3:f3:71:d2:50:eb:03:f4:70:2e:e5:c9:40:
2d:ee:39:48:68:f9:bb:55:ec:50:f2:88:8a:da:5b:
f3:f8:33:7b:bc:67:1c:df:d4:e6:49:31:3e:00:43:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55555
55859
sbgp-ipAddrBlock: critical
IPv4:
43.245.28.0/22
103.246.96.0/22
180.200.244.0/22
IPv6:
2400:b100::/32
Signature Algorithm: sha256WithRSAEncryption
7c:bb:a6:49:df:7c:56:b5:07:51:32:ec:13:f6:0a:ff:f7:88:
ce:ec:b7:73:96:23:c5:7b:61:97:91:50:05:1a:9d:45:f8:f6:
c7:ee:a3:f1:24:fa:4c:8e:20:34:b2:e0:fd:fe:16:80:e4:87:
6f:7d:d4:d8:f4:b6:e7:c5:1b:a8:f9:98:79:59:0c:15:9a:96:
e7:3b:ab:c9:c9:b2:c5:34:6c:a4:bb:2f:3f:bd:04:e2:48:24:
87:93:52:a2:8c:f0:4a:ea:5a:1a:26:ca:57:e5:45:fe:66:16:
ef:d8:8b:7f:dd:c7:2c:b0:69:02:da:53:ae:52:54:76:5a:ba:
b8:40:37:5a:6f:9e:c4:7f:0c:6b:c6:14:9f:4c:3a:79:f2:6d:
1d:14:9f:b7:1f:7d:72:d7:de:b5:52:a0:75:a9:68:a6:39:fd:
eb:5e:36:58:d1:e5:2c:72:eb:93:f6:89:ce:b7:47:79:61:ae:
ad:03:03:65:13:2a:7a:1d:e6:ca:a6:0f:73:0a:47:a8:29:06:
90:1c:b7:c3:94:55:54:ff:35:38:b4:8b:2e:df:97:c9:73:aa:
3d:db:e6:cd:ef:ce:37:a3:39:23:1b:c0:6f:c6:8e:f0:2c:13:
5b:6f:34:9e:ac:2b:a7:a0:8c:11:19:d3:ac:1d:18:5a:7d:e4:
c7:a4:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:01 2026 by rpki-client