Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
File: m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer (raw, json)
Hash identifier: oESQLzb17p3Afg/Kg55r/OkQ9bs4ZnMlu4XJ5QEX9DY=
Subject key identifier: 9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B09F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Apr 2026 07:58:43 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 138628
IP: 103.135.32.0/22
IP: 2404:7440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176287 (0x2b09f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 07:58:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91BF7D7, serialNumber=9BC5F9BB08E90969AA1D1EEF39DD6E41F3B07791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:4d:dd:42:eb:f2:d5:0f:fc:fb:84:f4:3f:
81:0c:83:48:0c:17:d2:98:38:65:f0:12:11:7d:c9:
db:8d:19:99:49:b8:99:fc:65:53:43:54:b6:44:38:
26:f5:e8:33:95:92:28:66:7b:1e:2f:07:71:63:24:
2e:49:69:59:e3:11:99:fa:3a:90:0b:40:64:cb:3d:
68:dc:53:07:f6:c3:94:d1:66:8c:50:21:b7:6c:66:
ab:12:4c:af:82:7b:8b:a6:91:11:94:c7:01:ca:81:
33:01:4a:ec:ec:c6:81:2f:73:2d:16:b6:6a:df:92:
87:81:b8:40:7a:94:67:a5:11:25:af:2a:0b:06:34:
30:97:69:e7:e3:5c:34:10:ae:b6:9d:06:46:13:fe:
20:82:47:02:8a:55:67:99:73:06:c1:f5:8b:4e:86:
6e:96:8e:c1:2f:96:a2:1d:78:d6:f6:c4:af:05:3a:
68:11:8e:76:b7:4d:c7:d7:f5:0f:a1:d1:7f:dc:3f:
0d:e9:9d:7f:a9:c1:48:05:e5:0e:d7:07:35:92:31:
00:d7:54:e9:09:5a:51:09:2a:99:d6:8b:18:ea:01:
4f:ab:0b:64:04:da:f9:9f:d6:3b:90:f9:29:48:e8:
ba:eb:85:2c:26:1b:01:b7:9e:15:22:82:5a:d6:97:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138628
sbgp-ipAddrBlock: critical
IPv4:
103.135.32.0/22
IPv6:
2404:7440::/32
Signature Algorithm: sha256WithRSAEncryption
c8:cf:c3:aa:9e:7a:e6:2d:a6:82:4a:ce:55:37:7f:95:42:6a:
75:23:ba:fc:5d:fb:f5:20:ce:ff:20:51:c5:c1:f9:93:b1:58:
9c:d6:60:20:29:2c:95:eb:2d:ac:bc:20:ea:45:d7:6a:7a:96:
b7:36:90:31:e4:92:0d:41:d8:fd:33:48:7a:20:e8:16:09:99:
a1:c1:a4:27:54:08:84:ea:f3:6c:1d:97:de:d4:4b:ff:0a:ac:
c6:ff:cd:54:24:21:96:1a:e2:c1:fd:d6:cf:09:3c:80:ad:71:
40:c3:13:91:e1:37:ff:f4:7b:da:d3:63:ab:49:8f:a0:d8:96:
5f:4d:c2:f0:7b:12:9b:98:c6:44:0e:ba:1e:d2:7a:14:30:23:
13:fd:51:94:5b:9c:ec:41:4c:b0:f4:fa:3b:95:6f:ee:82:ea:
47:2e:e6:ba:6b:e2:fb:d8:35:bb:0d:b4:55:72:68:4d:be:9b:
10:21:a2:18:33:47:f5:07:d4:d4:91:33:44:de:1d:56:27:a1:
d2:a4:71:a3:0a:4a:81:55:c1:2a:d6:a2:d8:84:ae:1e:98:d6:
53:29:eb:d2:b8:74:db:a4:4c:bc:2a:bc:7f:48:9c:cb:f3:13:
18:fe:6b:4c:8f:f8:31:57:8a:bc:08:12:9e:68:16:db:93:98:
10:fe:35:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:14 2026 by rpki-client