Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
File: oC73fAXKEwwiKYXNdK6TjaeaT78.cer (raw, json)
Hash identifier: A7Pv/fbfxQ2MJZdvWcAK8XIEE+xDTiCvYH82NRgktgQ=
Subject key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C210
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Jul 2026 12:57:44 +0000
Certificate not after: Sun 01 Nov 2026 00:00:00 +0000
Subordinate resources: AS: 136465
IP: 103.89.48.0/22
IP: 2400:e9c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180752 (0x2c210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 12:57:44 2026 GMT
Not After : Nov 1 00:00:00 2026 GMT
Subject: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:eb:47:08:4d:e3:29:49:b0:2f:de:73:3e:
10:d3:66:e0:6c:6a:9f:23:2f:89:05:a8:80:3d:ad:
e1:0f:36:e9:54:d0:fa:ae:db:69:94:04:20:fa:1e:
0f:66:b3:75:1a:a1:c1:17:59:8f:b7:fb:37:9c:36:
08:f2:45:f7:07:f4:7c:a7:35:62:0d:7b:1b:50:d5:
96:41:95:ce:f5:85:2c:71:ed:5a:7b:a5:e5:52:e9:
af:89:c5:86:0f:63:65:66:75:b7:0f:2c:ca:ad:65:
9c:0b:d0:4f:80:48:5f:d2:bf:90:04:c7:4a:3c:e6:
69:15:c6:18:43:f0:0a:b5:c7:91:99:f5:f0:70:2c:
8f:1a:51:36:0f:99:c4:03:e4:32:93:09:00:64:75:
68:41:4c:51:f4:69:0e:f1:ea:74:ad:06:85:1b:4b:
aa:22:55:b7:46:25:f4:96:e5:df:f9:5e:94:dc:a4:
33:8d:e8:b7:dd:5a:ca:97:bc:92:d9:dc:80:52:d6:
18:b4:23:6c:68:33:18:58:33:86:e2:22:fe:cf:77:
59:3f:87:52:42:90:b1:c7:5d:12:1d:f4:ed:75:f6:
da:70:54:fa:0f:7b:ac:54:97:e6:54:a5:65:c8:65:
4a:85:e7:ae:92:26:5c:a1:d1:79:30:53:20:fe:17:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136465
sbgp-ipAddrBlock: critical
IPv4:
103.89.48.0/22
IPv6:
2400:e9c0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:16:d3:55:21:cf:bf:65:f4:6a:8b:a3:25:ba:6a:dc:cd:2b:
19:ca:51:7a:95:db:30:b6:d1:72:e1:4f:c4:f1:da:41:3a:fd:
70:09:70:65:08:2e:75:41:f7:39:9b:ee:ed:70:1e:1c:43:f1:
6a:bb:b6:66:9c:9c:bd:7d:eb:5f:ae:14:23:2a:1c:7e:a5:64:
fc:81:93:5a:6b:62:c4:67:e6:7f:a0:3b:82:77:e2:0e:5d:87:
90:1d:dd:e2:c5:33:e0:51:46:b1:46:a0:85:3b:64:e4:ac:96:
68:4e:8c:95:df:10:19:41:03:8b:bc:a9:26:23:06:f2:9b:cd:
1a:ed:88:8a:1b:cc:09:40:c9:c1:f8:3a:43:20:f9:92:a2:61:
ba:07:73:90:7c:b3:1b:b2:e2:ee:d3:5e:2c:49:f4:de:d0:84:
24:db:d4:c4:d3:87:9a:ee:b8:47:3e:bf:e1:b9:6c:4f:1a:0d:
e2:fe:25:90:b9:b1:30:fa:5b:8d:2e:3f:b0:b0:91:9e:c1:eb:
35:af:46:15:4c:02:ae:75:c1:f7:1f:f3:0a:59:1e:95:2f:bc:
7b:4d:10:ef:ae:4f:18:85:71:5a:d5:0e:8a:2e:59:b3:02:25:
c3:17:83:76:2e:bd:7e:32:3e:71:6a:42:cc:f8:7d:af:25:8d:
18:b8:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:24 2026 by rpki-client