Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
File: laNNlXWF4FXwNo5HTaPR-bvPqN8.cer (raw, json)
Hash identifier: gBwc0kT6RvUAulcEgx1474O8JAyjDxOsGy45wMm5Zts=
Subject key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE0F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Apr 2026 08:42:44 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 134453
IP: 43.239.64.0/22
IP: 103.194.148.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175631 (0x2ae0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 08:42:44 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:8c:cd:36:09:06:8a:a9:c4:46:aa:2c:eb:
bb:9b:bd:f9:13:62:0c:71:76:50:07:26:e1:de:36:
32:7b:2c:ff:73:60:39:51:24:e9:b1:6e:a9:ed:f1:
67:26:f0:c4:c4:02:a5:d4:28:38:86:37:ac:16:a0:
be:3f:69:69:a5:48:bb:81:fc:cd:c0:ef:9c:27:01:
7b:2c:34:91:25:ae:43:1b:2b:c3:40:6a:e9:18:4c:
ca:4c:26:70:82:af:eb:1d:29:8b:e6:44:14:f2:83:
5b:c0:3a:b1:c6:4c:e6:b6:67:b8:4a:41:6c:57:7a:
47:83:2d:ba:ca:73:cf:ac:b0:1b:f6:3e:2a:f8:c2:
ae:44:97:3e:de:da:db:2a:66:8f:26:0c:dd:83:6e:
77:d0:86:fe:f9:c0:13:32:8a:ae:8a:5b:f3:77:35:
0c:23:0f:b8:b9:5b:f9:46:a9:68:6d:4f:c8:64:8b:
d1:c9:f7:3f:c4:d9:de:64:16:2c:f3:27:d1:ae:e6:
f0:d1:c8:ba:0e:5c:9c:2b:5a:51:89:d8:8d:3e:2a:
15:96:9e:2e:30:66:8d:6a:b6:09:92:1e:e4:50:e1:
07:dd:7f:ad:ad:9f:49:77:74:28:2f:56:42:44:2f:
1b:87:9a:01:40:39:10:6c:10:06:8c:c9:32:5f:86:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134453
sbgp-ipAddrBlock: critical
IPv4:
43.239.64.0/22
103.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
84:8b:5a:24:1b:db:a1:ba:01:8b:22:c2:d0:fe:26:f1:90:2e:
0b:28:ca:6f:45:1b:4b:9f:40:f9:88:a4:24:bc:a9:b0:cd:5c:
79:46:f4:fa:17:6a:13:93:c7:a3:f7:af:eb:f6:1c:22:f4:b1:
1d:45:b4:d9:b9:3e:cb:7b:b6:0b:39:e1:fd:1e:87:d2:67:6d:
11:46:42:c5:e9:98:8e:ad:37:b6:be:90:3a:e9:4d:1a:a9:43:
07:bb:87:fd:b6:b0:db:1d:92:7b:4f:96:dd:5a:02:88:60:8a:
3a:9e:dc:8f:08:d1:5c:38:f7:a5:2a:c0:4c:bc:e2:10:20:21:
d1:85:a3:c8:d6:67:cd:42:ef:7f:86:7d:2a:6b:c9:1f:d1:e1:
00:0d:98:06:06:dc:0d:f2:75:ab:9a:76:5d:c9:80:2a:ef:f6:
ce:77:ec:de:1b:b3:25:c5:94:fb:fb:a3:2b:a3:94:f1:5f:27:
a9:08:e1:be:e8:e1:84:9b:e8:ee:77:81:30:ce:5b:ec:db:cb:
65:6c:bd:9b:05:7a:48:4f:5d:bb:bc:ce:23:b6:b3:eb:e2:6f:
7c:cb:d5:10:b0:b8:7a:64:4e:ed:b8:74:64:12:27:32:60:67:
bd:53:96:3e:dd:d8:55:5c:43:b0:aa:0f:fa:73:36:7a:43:65:
83:bd:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:50 2026 by rpki-client