Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.cer (raw, json)
Hash identifier: Uyk8W2uciiW7YVanoIZlCoQMTtgp0kpEfNTJ9Kg9qQ8=
Subject key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Apr 2026 05:55:42 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 134195
IP: 43.230.112.0/22
IP: 103.49.156.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175623 (0x2ae07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 05:55:42 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:d9:cf:ff:00:5b:24:5b:a9:8f:16:1e:d1:
ce:7d:e3:03:71:8b:a0:0e:9f:0f:c3:bb:ce:24:94:
ac:90:7c:b0:ea:18:1e:34:b1:c7:c6:4e:00:dd:84:
00:fa:1b:c2:e3:69:4f:ec:a5:76:35:9a:a9:2d:65:
37:f6:24:bd:1b:09:0d:de:64:fd:6c:63:cc:32:a1:
b0:e7:cc:ef:d7:e7:b7:66:06:2c:40:1d:9a:bb:72:
1c:68:60:a9:75:a8:74:df:fc:9c:5c:9f:cf:08:1b:
81:44:81:20:45:8f:69:2a:40:0b:60:97:26:08:85:
c7:f3:3c:71:e6:13:cb:db:36:8f:6a:0d:57:bc:b5:
bc:bf:7c:61:22:80:4e:49:bf:96:cd:e1:46:35:9e:
fc:27:c8:a9:a9:e3:64:fe:65:66:0d:29:12:7b:b7:
82:41:40:dc:e0:88:7e:51:ed:b1:e6:e5:3e:67:63:
36:da:31:8f:09:79:61:86:9c:0f:24:95:61:8f:a9:
d1:54:6a:c9:ff:60:cd:fd:a7:c2:cc:be:73:3b:4b:
f6:59:8c:9d:79:cd:a4:97:8a:cf:0b:fa:6d:07:48:
c5:6f:43:ec:2b:94:14:ab:1f:4e:1f:0a:d3:23:ec:
18:c4:40:c4:90:11:99:8b:ff:e5:4b:ab:e2:87:75:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134195
sbgp-ipAddrBlock: critical
IPv4:
43.230.112.0/22
103.49.156.0/22
Signature Algorithm: sha256WithRSAEncryption
10:89:69:02:b9:b1:81:b7:c7:8e:fa:71:ea:9f:9f:f1:ac:00:
63:13:e8:01:49:74:23:68:51:6e:ed:c6:77:a5:03:f3:4a:ff:
c9:c9:8c:d9:02:48:6c:aa:42:e7:bf:c1:9d:d0:44:33:f8:92:
f6:bb:18:08:1a:2f:07:58:d3:55:30:3d:bf:7c:7f:b1:fa:35:
bf:e0:1b:2e:2f:7c:47:71:1a:95:59:8e:ea:c4:a2:91:ed:dc:
2c:77:33:88:f6:d7:68:6e:17:7c:75:f6:57:a4:07:d1:51:89:
b9:1d:01:ea:09:fe:52:e3:2e:86:48:c9:1b:c8:36:c7:61:1a:
f1:81:7a:93:83:86:c4:16:de:99:a6:6a:24:54:51:c5:af:a4:
de:1b:73:67:59:98:b0:6c:25:85:95:a8:22:10:ea:31:42:9e:
df:d7:1b:31:26:4b:e2:12:35:14:e1:70:80:b3:ae:e9:c6:67:
71:43:72:3e:fe:41:7f:86:88:e0:48:bf:33:6c:73:a2:ba:22:
10:d9:3d:5e:24:c1:ac:2d:87:24:2a:ee:28:dd:59:26:a2:2b:
45:45:ac:c4:85:40:96:4a:9c:2f:a9:ee:03:d5:38:0f:7e:84:
b8:43:4e:e9:a3:95:ff:10:ca:ff:15:30:aa:ee:0d:f1:9a:60:
f8:64:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:17 2026 by rpki-client